Solaris™ 8 System Administrator Exam Cram™ 2 (Exams CX-310-011 and CX-310-012)

Auditing Login Accounts and Processes

Several commands are available to monitor the use of system and user login accounts. In addition, you can use several commands to identify the processes currently running on the system and the associated login accounts.

The who Command

You can use the who(1) command to determine which system and user accounts are currently logged in to the local system. Without arguments, the who command lists the login account name, terminal device, login date/time, and optionally an indication of X Window System terminal (:0.0):

$ who
root       console      Apr  4 18:57    (:0)
root       pts/5        Apr  8 22:13    (:0.0)
dla        pts/6        Apr 11 21:06    (winnt40)
$

When the -q command-line argument is specified, only the login account names and number of ...