Hi I am wondering if it is possible to see the root password changes? does it get saved into a log file? Please let me know thanks. If the changes do not get saved please let me know how i can activate this.
I dont believe this is possible, and I wouldnt want such thing on my server, or the log should at least be encrypted+salt , then encrypted again
Well dont want it to show the actauly password, just want it to show the ip of who changed it and the date and time. thats what i need in the log. let me know thanks!
I believe the Snort intrusion detection system allows you to track such changes, and a whole lot more. Hope this helps .
Install configserver security&firewall (CSF). It will notify you instantly whenever the root password is changed. But I think it will not give you the IP address.. Need some research here...