* Johannes Kastl
On 21.02.2015 Andreas Färber wrote:
Any ideas what else to check?
I have some sudo related stuff in /var/log/audit/audit.log, might be necessary to install auditd to get that. And that is mostly apparmor stating that someone executed sudo.
I'm trying to get the sudo logs out of journalctl right now, because I wanted to tell you where to look for the logs, but could not find them myself... ;-)
journalctl |grep sudo or journalctl |grep -C3 sudo -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org