Dec 03 18 53 su Successful su for root by root Dec 03 18 53 su root ro

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
Dec 2 03:18:53 [su] Successful su for root by root
Dec 2 03:18:53 [su] + ??? root:root
Dec 2 03:18:53 [su] pam_unix(su:session): session opened for user root by (uid=0)
Dec 2 03:18:53 [su] pam_unix(su:session): session closed for user root
Dec 2 03:18:53 [su] Successful su for root by root
Dec 2 03:18:53 [su] + ??? root:root
Dec 2 03:18:53 [su] pam_unix(su:session): session opened for user root by (uid=0)
Dec 2 03:18:53 [su] pam_unix(su:session): session closed for user root
Dec 2 09:28:18 [su] pam_unix(su:auth): authentication failure; logname=casufi uid=1001 euid=1001 tty=tty3 ruser=casufi rhost= user=root
Dec 2 09:28:19 [su] pam_authenticate: Authentication failure
Dec 2 09:28:20 [su] FAILED su for root by casufi
Dec 2 09:28:20 [su] - tty3 casufi:root