Date: Sat, 4 Mar 2006 11:50:38 -0600 From: "Kelly D. Grills" <kdgrills@the-grills.com> To: freebsd-questions@freebsd.org Subject: Re: How to figure out who shutdown box Message-ID: <20060304175038.GB752@the-grills.com> In-Reply-To: <20060304174236.GA752@the-grills.com> References: <Pine.BSO.4.58.0603041011130.14807@naughty.monkey.org> <20060304174236.GA752@the-grills.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--kXdP64Ggrk/fb43R Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Mar 04, 2006 at 11:42:49AM -0600, Kelly D. Grills wrote: >=20 > Where are you logging security messages? I believe the default is to > /var/log/security Sorry, meant to say auth >=20 > Have a look at /etc/syslog.conf and syslog.conf(5) >=20 > You should see messages such as this in your security log: Again, auth > Mar 1 15:21:38 srv1 shutdown: reboot by kdgrills: =20 --=20 Kelly D. Grills kdgrills@the-grills.com --kXdP64Ggrk/fb43R Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) Comment: PGP key: mailto:kdgrills-pgpkey@the-grills.com iD8DBQFECdNt7inS5LzF7HMRAtqIAKCBkYD/Lv832CU8TZG936p2QQAtLQCcDncQ CnvN86+Ums6jQkHfLiZyxKk= =QMFj -----END PGP SIGNATURE----- --kXdP64Ggrk/fb43R--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060304175038.GB752>