Re: Command to dump/restore user info OSR5

----- clipped -----
| > Can 'ap' be used to determine if ones password has been changed?
| > especially root's password? .... other then grepping '/etc/shadow'
| > for a user and checking for a change?
|
| yes with the right options. What I have done is a nightly shell script
| that dumps everything and then does a diff on the saved know good and the
| new dump. This lets me know when some makes changes. I am working on a
| port of rkhunter that would be better, as it checks for a lot of other
| things.
|
Boyd,

Till you wrap up 'rkhunter' can you share the 'ap' syntax to monitor
ones password change ?

- Jeff H

.