From owner-freebsd-questions Thu Apr 4 7:45:25 2002 Delivered-To: freebsd-questions@freebsd.org Received: from trot.galis.org (ool-18bd0cd9.dyn.optonline.net [24.189.12.217]) by hub.freebsd.org (Postfix) with ESMTP id 93EED37B43F for ; Thu, 4 Apr 2002 07:45:05 -0800 (PST) Received: (from gx@localhost) by trot.galis.org (8.11.6/8.11.6) id g34Fj6210480; Thu, 4 Apr 2002 10:45:06 -0500 Date: Thu, 4 Apr 2002 10:45:06 -0500 From: George Georgalis To: "Galella, Anthony" Cc: "'Rob B'" , freebsd-questions@FreeBSD.ORG Subject: Re: verbose logging of root? Message-ID: <20020404104506.E9116@trot.haven.dom> References: <59F55CE047A6D51196360002A534A4AC3703E7@pysmsx102.py.intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <59F55CE047A6D51196360002A534A4AC3703E7@pysmsx102.py.intel.com>; from anthony.galella@intel.com on Thu, Apr 04, 2002 at 10:11:02AM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, Apr 04, 2002 at 10:11:02AM -0500, Galella, Anthony wrote: >Unfortunately sudo won't help in this situation. >There is a "backup" sysadmin here that has root access in case I am not >available. >He is learning, but I want to be able to track everything he does as root in >order to know exactly what is happening on the system. >Case in point: he chown'd and chmod'd a whole directory structure, causing >loss of access for users. I found the problem, and fixed it, but if I could >track what he did in the logs, I could be aware of these things before users >are (hopefully):) > > >Anthony J. Galella >anthony.galella@intel.com Haven't tried it, but why not echo $PWD, $$, and tail -n1 `history` to ~/root.log as part of a $PS1 variable? (or equivalent for csh, I always use bash) // George -- GEORGE GEORGALIS, System Admin/Architect cell: 347-451-8229 Security Services, Web, Mail, mailto:george@galis.org File, Print, DB and DNS Servers. http://www.galis.org/george To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message