Can /var/log/wtmp (wtmp) be modified to conceal login activity?
Issue
-
Can /var/log/wtmp (wtmp) be modified to conceal login activity?
-
Could the last command be inaccurate or modified to conceal login activity?
Environment
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.