From owner-freebsd-questions@FreeBSD.ORG Fri Oct 17 13:55:06 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DCC0416A4BF for ; Fri, 17 Oct 2003 13:55:06 -0700 (PDT) Received: from kochana.org (pd140.bydgoszcz.sdi.tpnet.pl [194.204.139.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5090F43F3F for ; Fri, 17 Oct 2003 13:54:55 -0700 (PDT) (envelope-from idaho@kochana.org) Received: from kochana.org (idaho@kochana.org [127.0.0.1]) by kochana.org (8.12.9p2/8.12.9) with ESMTP id h9HKsdlt042608 for ; Fri, 17 Oct 2003 22:54:39 +0200 (CEST) (envelope-from idaho@kochana.org) Received: from localhost (idaho@localhost) by kochana.org (8.12.9p2/8.12.9/Submit) with ESMTP id h9HKsXlG042604 for ; Fri, 17 Oct 2003 22:54:39 +0200 (CEST) (envelope-from idaho@kochana.org) Date: Fri, 17 Oct 2003 22:54:33 +0200 (CEST) From: Lukasz Wasikowski To: freebsd-questions@freebsd.org In-Reply-To: <44pth6eewl.fsf@be-well.ilk.org> Message-ID: <20031017224612.S42490@kochana.org> References: <20031008004255.L48093@kochana.org> <44pth6eewl.fsf@be-well.ilk.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: Re: Logging users activity with termlog X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Oct 2003 20:55:07 -0000 Hello! On Thu, 9 Oct 2003, Lowell Gilbert wrote: LG> > 1. I'd like to run termlog -u UID as soon as user with UID log in. How LG> > should I do it? LG> I don't think there are any great answers there. The easy hack is to LG> mess with login scripts, but that would be visible to the user (if LG> they checked). That's fine with me. If users know their actions are logged they may reconsider twice any illegal activity on my box. LG> For a fair amount of extra effort, you could hack it LG> into login(1) itself. I'm not that good with C programming. LG> Those are problems specific to "termlog"; since I never heard of it LG> until now, I don't know much, but on the first I would guess that it's LG> not opening the "real" terminal line. Port: termlog-1.0.3 Path: /usr/ports/security/termlog Info: Monitor or log multiple system terminals synchronously (real-time) This utility is monitoring and logging multiple system ttys. I've decided to use it becaus it looked like this it what I was looking for. But it isn't working right or maybe I can't make it work. LG> > Maybe there is a better way to log users activity? LG> Did you look at the watch(8) utility in the base system? Yes, but only in interactive mode. I'll try to make it work automatically as soon as users log in. -- Greetz, Idaho