How can I tell which user run a specific command
Issue
- How can I tell which user ran a specific command ?
- Which user is shutting down the system
- Who ran a specific command
- If the user clears their .bash_history can I still tell who ran a command ?
Environment
- Red Hat Enterprise Linux 5 - any architecture
- Red Hat Enterprise Linux 6 - any architecture
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
