Re: how to check what has done on a computer?
From: Unruh (unruh-spam_at_physics.ubc.ca)
Date: 1 Oct 2005 19:08:10 GMT
"Ross" <firstname.lastname@example.org> writes:
>"Unruh" <email@example.com> wrote in message
>> "Ross" <firstname.lastname@example.org> writes:
>>>i try to look at log files but can't obtain what i want. if i suspect sb.
>>>somehow knows my root password and used it to delete some of the files in
>>>disk, how can i check? thx a lot!!!!!!!!!!!
>> You cannot. If he has root then he can cover up his tracks. Immediately
>> change your root password, and probably wipe the disk and reinstall.
>oh, just suppose he is not clever enough to clean up all the traces, so what
>can i try to look for? thx~~
history under root
Just type history