【查看】如何查看用户登录及用户操作相关信息
2021年01月19日 16:21:44 作者:Jiaozn 分类:Linux 评论(0)who chaosju :0 2015-05-21 12:50 (:0) chaosju pts/1 2015-05-21 12:54 (:0)
last chaosju pts/1 :0 Thu May 21 12:54 still logged in chaosju :0 :0 Thu May 21 12:50 still logged in reboot system boot 3.13.0-32-generi Thu May 21 12:49 - 13:18 (00:28) chaosju pts/27 :0 Wed May 20 23:46 - down (00:16)
lastlog 用户名 端口 来自 最后登陆时间 root **从未登录过**daemon **从未登录过**bin **从未登录过**
cat /var/log/auth.log |more May :: chaosju-ThinkPad-SL410 CRON[]: pam_unix(cron:session): session opened user root by (uid= May :: chaosju-ThinkPad-SL410 CRON[]: pam_unix(cron:session): session closed May :: chaosju-ThinkPad-SL410 pkexec: pam_unix(polkit-:session): session opened user root by (uid= May :: chaosju-ThinkPad-SL410 pkexec[]: chaosju: Executing command [USER=root]
除非注明，发表在“Jiaozn的博客”的文章『【查看】如何查看用户登录及用户操作相关信息』版权归Jiaozn所有。
转载请注明出处为“本文转载于『Jiaozn的博客』原地址https://jiaozn.com/reed/627.html”
评论
发表评论