Linux: how to know who deleted my user account [closed]

Question

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.

---

This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.

Closed 8 years ago.

Improve this question

I have a regular username on a linux machine. I also have the root privilege. Today I found my username was deleted. That is, if I logged in as root and then ran

su myusername

The systems said "myusername" does not exist. I checked file /etc/passwd and "myusername" was not there.

My question is, is there anyway to find out who deleted "myusername"?

Answer 1

You might try something like this:

grep "deluser" /home/*/.bash_history /root/.bash_history