raamcm DeleteThis @gmail.com enlightened us with:
> i need some information about my linux server users login details.
> how can i get the users login time and ip or hostname. why because
> today somebody delete our webserver dircectory. when i was configure
> the webserver at that time i gave full write and read(chmod 777)
> permission. but now i realize how big stupid thing i have make it.
> in my network 125 peoples have to access in that linux server with
> there own username via putty. seriously i am now pathetic situation.
> let me guys how can i revertback the files
You can't "undelete" the files, at least not with any certainty of
full recovery, especially if you use a journaling filesystem. Just
restore them from a backup.
> and users logon details(users commands) also.
What do you mean? Do you want information about who logged at what
time? Or do you want to restore a history of user commands? What
exactly are you asking?
Sybren
--
The problem with the world is stupidity. Not saying there should be a
capital punishment for stupidity, but why don't we just take the
safety labels off of everything and let the problem solve itself?
Frank Zappa
Linux