Statement #2 Responses

• Assumptions

  • root log ins are not permitted

• Alert messages

  • Illegal root login
  • Unauthorized use of su() command
  • Root assumed a user’s identity
  • Unauthorized transition to a new user ID