Administering user accounts

Logging su(1M) usage

Use of the su(1M) command is logged in the file /var/adm/sulog like this:

   SU 07/08 22:32 + ttyp0 mavrac-root

The entry indicates the date, time, location, and name of the account using the command. The following information is logged if an entry for SULOG appears in /etc/default/su:

   SULOG=/usr/adm/sulog