Auditing Users

The next two sections describe a few of the commands used to view information about users who have logged into the system.

Monitoring Users and System Usage

As the system administrator, you’ll need to monitor system resources and watch for unusual activity. Having a method to monitor the system is useful when you suspect a breach in security. For example, you might want to monitor the login status of a particular user. Use the logins command to monitor a particular user’s activities, as follows:

Exercise 16.1 Monitoring a User’s Activity

1.
Become superuser.
2.
Display a user’s login status by using the logins command: 
# logins -x -l username
For example, to monitor login status for the user calkins, type the

Get Inside Solaris™ 9 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial