Is there a way to log successful and unsuccessful shutdown, halt and reboot commands issued by users? I am working with the audit subsystem, but I don't see it listed as an event.
I would expect that only root or someone you have granted sudo rights to these commands would be running them. What users are you wanting to audit?
A successful shutdown, halt, and reboot should be logged in the AIX error report. As for the unsuccessful ones I am not aware of a log for that but you could write you a wrapper script and within that script log what id executes that script.
We do that for password changes. We have over 200 little groups of people and there is an admin assigned to each group to reset password.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.