From owner-freebsd-security Fri Nov 26 1:13:51 1999 Delivered-To: freebsd-security@freebsd.org Received: from trinity.euromedia.pl (trinity.euromedia.pl [212.160.118.18]) by hub.freebsd.org (Postfix) with ESMTP id 6D00114DCB for ; Fri, 26 Nov 1999 01:13:41 -0800 (PST) (envelope-from ) Received: from pc4.euromedia.pl ([212.160.118.24]:3588 "EHLO pc4" ident: "NO-IDENT-SERVICE[2]" smtp-auth: "rafal" TLS-CIPHER: TLS-CCERT: ) by trinity.euromedia.pl with ESMTP id ; Fri, 26 Nov 1999 10:17:05 +0100 Message-ID: <000901bf37ee$8bf9a0c0$1876a0d4@euromedia.pl> From: =?iso-8859-1?Q?Rafa=B3_Banaszkiewicz?= To: "Dima" , References: <383E47D5.7B264ECB@mmc.net.ge> Subject: Odp: Commands execution loging Date: Fri, 26 Nov 1999 10:13:33 +0100 Organization: EMEDIA - Internet Content Provider MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2417.2000 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I have several users with shell (bash, sh) in my FreeBSD 3.2 system. I'd > like to log all commands (for security reasons) they type and execute. > Is there any possibility to pass all commands to syslog? I know about > .bash_history and .history, but they are stored in users directory and > without time of command execution, and I want to have records like > "user time command". You have to turn on accounting (in example - in /etc/defaults/rc.conf file), so all user commands are logged into /var/account/acct , savacct , usracct > > Dima > /* signature.c */ void main() { printf("###\t###\t###\n\r# #\t# #\t# \n\r###\t###\t## \n\r# #\t# #\t# \n\r"); return; } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message