Using Syslog to email "su" attempts.

From: Burtenshaw, Craig (craig.burtenshaw@amsa.gov.au)
Date: Wed Jan 08 2003 - 23:51:31 EST


Hi,

Looking to use syslog to email "su" attempts.

Tried this as an option
auth.notice suattempts
Where "suattempts" is an email alias.

and also tried
auth.notice suattempts@domain.com.au

But this didn't email me, do I need to do something else, OR is this not
possible and I will have to
monitor the /var/adm/sulog file?

Thank you in advance, will post a Summary.

Craig.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Craig Burtenshaw
Unix Systems/Oracle Database Administrator
Information Services

Australian Maritime Safety Authority
PO Box 2181
Canberra City ACT 2601

Lvl 2, 25 Constitution Ave
Canberra City ACT 2601
                                International
Ph: (02) 6279 5824 61 2 6279 5824
Fax: (02) 6279 5024 61 2 6279 5024
E-Mail: Craig.Burtenshaw@amsa.gov.au
AMSA Web site: http://www.amsa.gov.au
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Friends help you move. Real friends help you move bodies.
that any use or dissemination of this communication is prohibited.
If you receive this transmission in error, please notify us immediately
by telephone on 02-62795000 and delete all copies of this transmission
together with any attachments.
**********************************************************************
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:33 EDT