System Administration Guide
Chapter 1, Administering user accounts

Logging su(C) usage

Logging su(C) usage

Use of the su(C) command is logged in the file /usr/adm/sulog like this:

   SU 07/08 22:32 + ttyp0 mavrac-root
The entry indicates the date, time, location, and name of the account using the command. The following information is logged if an entry for SULOG appears in /etc/default/su:
   SULOG=/usr/adm/sulog

See also: