Command logging after 'su'

Wed Sep 22 15:40:32 UTC 2010

pam can be configured to log every key a user presses via the audit daemon. This, however, is useless unless you ship logging off the box. 

Sent from my iPhone

On Sep 22, 2010, at 10:36 AM, "przemolicc at poczta.fm" <przemolicc at poczta.fm> wrote:

> Hi,
> 
> we have user 'u1' which can do 'su - root'.
> Is it possible to log all commands run by this user:
> - during id=u1
> - after su to 'root' ?
> 
> Regards
> P.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ------------------------------------------------------
> Tanie mieszkania lub pokoje do wynajÄ™cia dla studentĂłw! 
> http://linkint.pl/f27f9
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list