From owner-freebsd-questions@FreeBSD.ORG Mon Jun 19 02:29:08 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6E58516A479 for ; Mon, 19 Jun 2006 02:29:08 +0000 (UTC) (envelope-from lordsporkton@gmail.com) Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.235]) by mx1.FreeBSD.org (Postfix) with ESMTP id F002E43D48 for ; Mon, 19 Jun 2006 02:29:07 +0000 (GMT) (envelope-from lordsporkton@gmail.com) Received: by wr-out-0506.google.com with SMTP id i24so949288wra for ; Sun, 18 Jun 2006 19:29:07 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=PKK+MitqqzDbCApEFfP4//12pcEexsqmIV4VhkWxCeIKxlKzD/yHHhqFSxTcHLOgpnSgckGDS+jb/Gac+7j1YXI9rgarA/ow7zEj3tQd3xnhO/3ZDEtyxuWX0w99OcPGYZD/9y2LN0uiUmnykJCB3K2s6H350TkDaERVTIyE0SY= Received: by 10.65.236.9 with SMTP id n9mr4824078qbr; Sun, 18 Jun 2006 19:29:06 -0700 (PDT) Received: by 10.65.11.9 with HTTP; Sun, 18 Jun 2006 19:29:06 -0700 (PDT) Message-ID: Date: Sun, 18 Jun 2006 19:29:06 -0700 From: "Lawrence Horvath" To: "David Scheidt" , freebsd-questions@freebsd.org In-Reply-To: <20060619012420.GA20345@panix.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20060619012420.GA20345@panix.com> Cc: Subject: Re: syslog all commands X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jun 2006 02:29:08 -0000 I was kinda hoping for arguments as well, and possibly the time and date of when it was run. On 6/18/06, David Scheidt wrote: > On Sun, Jun 18, 2006 at 06:06:45PM -0700, Lawrence Horvath wrote: > > Date: Sun, 18 Jun 2006 18:06:45 -0700 > > From: Lawrence Horvath > > To: freebsd-questions@freebsd.org > > Subject: syslog all commands > > > > Im looking for a way to syslog all commands run my a group of users, i > > was looking at the authpriv.debug but it doesn't log _every_ command, > > is there anyother way to syslog all the commands run by a user? > > > > Is process accounting good enough? It'll record the name of the > commands run by all users, what terminal they were run from, how much > cpu time they used, and start and stop times. > > See the man pages for acct(5) and lastcomm(1). It's turned on by > setting accounting_enable="YES" in /etc/rc.conf, and running > /etc/rc.d/accounting start > > David > I was kinda hoping for arguments as well, and possibly the time and date of when it was run. -- -Lawrence