Monitoring priviledged users activity on the system

[Manuel Aróstegui]

El dom, 12-07-2009 a las 23:36 +0300, a bv escribió:
> Hi,
> 
> I have some RHEL 5,4,3, boxes which some priviledged users (who can
> sudo) exits. Cause all can sudo, have the same rights, its sometimes
> who doess what on the system  (sometimes strange thinhgs happen, the
> daeomons stop etc.) . So how can i monitor the system who does what on
> it , not only talking about securing it.

What about logging their shell? Doing that you'd be able to know which
commands the user ran.

Manuel.
-- 
Manuel Arostegui Ramirez.

Electronic Mail is not secure, might not be read every day, and should not
be used for urgent or sensitive issues.