From owner-freebsd-questions Sun Jun 27 10:33:12 1999 Delivered-To: freebsd-questions@freebsd.org Received: from serveri.netti.fi (serveri.netti.fi [195.16.192.130]) by hub.freebsd.org (Postfix) with ESMTP id 09DA3150D0 for ; Sun, 27 Jun 1999 10:32:59 -0700 (PDT) (envelope-from yurtesen@ispro.net.tr) Received: from ispro.net.tr (dyn-0-115.tku.netti.fi [195.16.223.116]) by serveri.netti.fi (8.8.8/8.8.3) with ESMTP id UAA15847 for ; Sun, 27 Jun 1999 20:31:38 +0300 Message-ID: <37765F16.EA06FF48@ispro.net.tr> Date: Sun, 27 Jun 1999 20:27:50 +0300 From: Evren Yurtesen X-Mailer: Mozilla 4.51 [en] (Win98; I) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: how to watch the root user? Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello, I have a system where there are multiple people who knows the root password I want to keep a track of what other people does after they become root user. I have been using .logout file to mail the .history file to myself and see the commands processed, but there are ways to pass it. For example somebody can delete his history before going out, etc. Also I am suspected that somebody is clearing his history with shell builtin command "history" is there a way to disable this command? so is there any reliable way to keep track of root users? (any smart ideas?) Evren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message