Security Basics mailing list archives

Re: Monitoring the change of password in Unix


From: Gustavo Castro <gcastrop () gmail com>
Date: Wed, 21 Jan 2009 14:41:02 -0200

Wilson:

  You may want to monitor the /etc/passwd file, not the use of the
"command" passwd... Use tripwire, or something like it.

2009/1/21  <wilson () email chop edu>:
Is there a way in Unix, without extra software, to monitor the use of the "passwrd" command to reset the password?  
Perferably something that sent the event to Syslog.


-- 
Saludos,
     Gustavo Castro Puig.
     E-Mail: gcastrop () gmail com

LPI Level-1 Certified (https://www.lpi.org/es/verify.html
LPID:LPI000042304 Verification Code: hp6re8w5qg )
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS/CM/IT/ED dx s-:- a? C(+++)$ UL++++*$ P+ L++++(++)$ E--- W+++$ N+ o?
K- w O M V-- PS PE++(-) Y-(+) PGP+ t(++) 5+ X++ R tv+ b++(++++) DI+++
D++ G++ e++ h--- r y+++
------END GEEK CODE BLOCK------
Registered Linux User #69342


Current thread: