in reply to /etc/shadow logging

What about using FAM to monitor the file instead? Using SGI::FAM it would be a breeze. I don't know if FAM compiles easily on Solaris 8 though.

Replies are listed 'Best First'.
Re^2: /etc/shadow logging
by ikegami (Patriarch) on Mar 13, 2006 at 17:19 UTC
    If that doesn't work, they could use the low tech version of having a cron job compare the current value against the last known value.