Command logging after 'su'
Elliott, Andrew
Andrew.Elliott at istat.ca
Wed Sep 22 15:55:22 UTC 2010
...Should be in the .history (bash) file, no?
You should try to get them to use 'sudo'. That will capture all the commands in the users' .bash_history rather than root's...
-----Original Message-----
From: redhat-list-bounces at redhat.com [mailto:redhat-list-bounces at redhat.com] On Behalf Of Marti, Robert
Sent: Wednesday, September 22, 2010 11:41 AM
To: przemolicc at poczta.fm; General Red HatLinuxdiscussion list
Subject: Re: Command logging after 'su'
pam can be configured to log every key a user presses via the audit daemon. This, however, is useless unless you ship logging off the box.
Sent from my iPhone
On Sep 22, 2010, at 10:36 AM, "przemolicc at poczta.fm" <przemolicc at poczta.fm> wrote:
> Hi,
>
> we have user 'u1' which can do 'su - root'.
> Is it possible to log all commands run by this user:
> - during id=u1
> - after su to 'root' ?
>
> Regards
> P.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> ------------------------------------------------------
> Tanie mieszkania lub pokoje do wynajÄcia dla studentĂłw!
> http://linkint.pl/f27f9
>
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
More information about the redhat-list
mailing list