From owner-freebsd-questions Sat May 5 20:14:14 2001 Delivered-To: freebsd-questions@freebsd.org Received: from edwin.mounet.com (edwin.mounet.com [216.145.76.8]) by hub.freebsd.org (Postfix) with SMTP id CF15437B422 for ; Sat, 5 May 2001 20:14:11 -0700 (PDT) (envelope-from hornback@wireco.net) Received: (qmail 1695 invoked by uid 0); 6 May 2001 03:09:49 -0000 Received: from unknown (HELO tomcat) (216.145.67.82) by mounet.com with SMTP; 6 May 2001 03:09:49 -0000 From: "Andrew C. Hornback" To: "Vivek Khera" Cc: "FreeBSD Questions" Subject: RE: OT: FreeBSD Security tip Date: Sat, 5 May 2001 23:14:03 -0400 Message-ID: <002001c0d5da$9a9de600$0e00000a@tomcat> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 In-Reply-To: <15092.45708.995113.128307@yertle.kciLink.com> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Vivek Khera > Sent: Saturday, May 05, 2001 10:10 PM > To: Charles Burns > Cc: questions@freebsd.org > Subject: Re: OT: FreeBSD Security tip > > >>>>> "CB" == Charles Burns writes: > > >> Why not just set their shells *not* to keep the command log in > the first > >> place? > > CB> I would miss my scrollback buffer. ;-) It saves me quite a bit of > CB> time and I use is more frequently than probably any other > > there's a difference between having a shell history buffer and saving > such a buffer to disk... in csh, the former is set with the history > variable and the latter with the savehist variable. Is there any way to log all of the shell history from all of the users on the machine to a log file? Not just one user in one place, but all of the users? Seems like something like this would be handy if you're dealing with a possible intruder in the system, have the file log the commands they're using, as they're using them... --- Andy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message