Originally posted by: SystemAdmin
Hi,
I am using AIX 5.3 TL9.
On our servers, system logging is set to log all messages at the info level to the system log; e.g.
*.info;mail.none;local2.none;local3.none;daemon.none /var/adm/syslog/syslog.log
One of the problems is that the su command generates entries in both the sulog and in the system log. This seems excessive, and I was wondering is there a way to change the su command from sending messages using auth:notice to say auth:debug. That way the successful use of su will only be logged in the sulog.
Thanks