Date: Fri, 27 Feb 1998 07:37:35 -0600 From: Michael Horton <mhorton@magibox.net> To: pdinesh@opentech.stpn.soft.net Cc: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG> Subject: Re: Logging User's activity Message-ID: <Version.32.19980227072752.00f47780@206.26.142.2> In-Reply-To: <34F6DAEC.8DEED7F8@opentech.stpn.soft.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Dinesh Pal, Couldn't you just "turn-on" the user's history function in her ".profile/.login/etc." file. This also provides for reusing previous commands. (Reusing commands is a great tool for every user. My history is set to 2500 and it is invaluable.) The history file can be evaluated (and the user's actions recreated). An added bonus is that if the file is removed or emptied of its contents, you have an indication that the user may want to conceal what she is doing and that you may have a problem in the making. The history file is a normal part of the UNIX user accounts that I have worked with and should not cause any concern on the user's part. You will probably find that that this user is trying to learn and is not a real or deliberate threat. If you ever wanted to do a security audit, now is a good time; the user can help you! MH At 2/27/98 09:25 AM , Dinesh Pal wrote: >One of my FreeBSd user is very creative .He always try to explore something new >on my servers .I want to log his all the commands entered by him without his >knowledge,So that i can check that later.Please advice. > >Thanks > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Version.32.19980227072752.00f47780>