Can /var/log/wtmp (wtmp) be modified to conceal login activity?

Solution Verified - Updated -

Issue

  • Can /var/log/wtmp (wtmp) be modified to conceal login activity?

  • Could the last command be inaccurate or modified to conceal login activity?

Environment

  • Red Hat Enterprise Linux 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In