Very Computer

by **Rob** » Sun, 10 Jan 1999 04:00:00

Hello

Is there anyway I can log all of a specific user's movements, such as
what commands they have run?

Thanks

--

Rob Barnes

Web Page : Brother wrecked it, last time I let him use FTP..

by **ander..** » Sun, 10 Jan 1999 04:00:00

You might take a look at the user's history file, for a start.

> Hello
> Is there anyway I can log all of a specific user's movements, such as
> what commands they have run?
> Thanks

--

RedHat 5.2 Linux kernel 2.0.36 | "Penguins are generally nice creatures"

by **Chris Hedl** » Sun, 10 Jan 1999 04:00:00

Quote:> Is there anyway I can log all of a specific user's movements, such as
> what commands they have run?

You could always turn on process accounting (see accton etc) which logs
every binary run on the system by anybody (but doesn't include command-
line flags) Beware, though; you'll need to watch the disc-space on
busy systems if you don't have a big enough /var. At one of my previous
employers, we used to use this to generate daily stats in order to do
system load-balancing etc.

Chris.

by **Stefan David** » Sun, 10 Jan 1999 04:00:00

>Hello
>Is there anyway I can log all of a specific user's movements, such as
>what commands they have run?

For bash all commands are generally logged in .bash_history. The may not be
massively useful though since the user in question can edit/delete it if
they wish.

You might want to look at ttysnoop - that allows you to connect to a
particular tty and monitor or interact with it. I don't know of anything off
hand that will watch for particular users and log everything they do.

Stefan

by **Raymond Doetje** » Sun, 10 Jan 1999 04:00:00

Login as root and go to the HOME dirs
Make a small script that cat 's the .bash_history file (only when bash
is defauult shell otherwise .history) in the users home dir. This tracks
all the user command entries.

Raymond

> Hello

> Is there anyway I can log all of a specific user's movements, such as
> what commands they have run?

> Thanks

> --

> Rob Barnes

> Web Page : Brother wrecked it, last time I let him use FTP..

by **Rob** » Mon, 11 Jan 1999 04:00:00

The default we are using is C shell. I dont suppose there is a way to
do it no matter what shell they are using?

Cheers

Rob

> Login as root and go to the HOME dirs
> Make a small script that cat 's the .bash_history file (only when bash
> is defauult shell otherwise .history) in the users home dir. This tracks
> all the user command entries.

> Raymond

> > Hello

> > Is there anyway I can log all of a specific user's movements, such as
> > what commands they have run?

> > Thanks

> > --

> > Rob Barnes

> > Web Page : Brother wrecked it, last time I let him use FTP..

--

Rob Barnes

Web Page : Brother wrecked it, last time I let him use FTP..

Very Computer

Logging a user

Logging a user

Logging a user

Logging a user

Logging a user

Logging a user

Logging a user