Re: how to check what has done on a computer?

From: Unruh (unruh-spam_at_physics.ubc.ca)
Date: 10/01/05


Date: 1 Oct 2005 19:08:10 GMT


"Ross" <a@cuhk.edu.hk> writes:

>"Unruh" <unruh-spam@physics.ubc.ca> wrote in message
>news:dhmc0e$m0a$1@nntp.itservices.ubc.ca...
>> "Ross" <a@cuhk.edu.hk> writes:
>>
>>>i try to look at log files but can't obtain what i want. if i suspect sb.
>>>somehow knows my root password and used it to delete some of the files in
>>>disk, how can i check? thx a lot!!!!!!!!!!!
>>
>> You cannot. If he has root then he can cover up his tracks. Immediately
>> change your root password, and probably wipe the disk and reinstall.
>>

>oh, just suppose he is not clever enough to clean up all the traces, so what
>can i try to look for? thx~~

history under root
Just type history