Hi,
I want to know how can we come to know who has system rebooted, I have given the command last but it showing the last user has login and logout after some time,but reboot command is showing after 10 mins,how can we trace that it is automatically rebooted or rebooted by some person,
Change the password for root!
you can look at error report. Command is ;
errpt -a
but only the root I thing reboot the system. So may be you'll find the "the root user reboot the system" message in log.But you can rescrict the root login just only for some terminals and change the root password.