From owner-trustedbsd-audit@FreeBSD.ORG  Sat May  6 18:37:43 2006
Return-Path: <owner-trustedbsd-audit@FreeBSD.ORG>
X-Original-To: trustedbsd-audit@freebsd.org
Delivered-To: trustedbsd-audit@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3A05316A400
	for <trustedbsd-audit@freebsd.org>;
	Sat,  6 May 2006 18:37:43 +0000 (UTC)
	(envelope-from patrick_dkt@yahoo.com.hk)
Received: from web54306.mail.yahoo.com (web54306.mail.yahoo.com
	[206.190.49.116])
	by mx1.FreeBSD.org (Postfix) with SMTP id A9C5A43D45
	for <trustedbsd-audit@freebsd.org>;
	Sat,  6 May 2006 18:37:42 +0000 (GMT)
	(envelope-from patrick_dkt@yahoo.com.hk)
Received: (qmail 17218 invoked by uid 60001); 6 May 2006 18:37:41 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk;
	h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=H3Qk5YZglp3plvABU96d6GaagYoVAoACfkra8KSA1/cWfxRCHvtpjroVs1FUYsvxRIj/MJEwcjR6U3gEz5OMhGagFzbJdUaZdVNGVOkZMXjT13DbDX+5pbXLpE7fpjlZSPnk9/jUL0XX+Aq4alW8KpEI9gdpDQdff6cHnW6I2Ys=
	; 
Message-ID: <20060506183741.17216.qmail@web54306.mail.yahoo.com>
Received: from [202.134.67.165] by web54306.mail.yahoo.com via HTTP;
	Sat, 06 May 2006 11:37:41 PDT
Date: Sat, 6 May 2006 11:37:41 -0700 (PDT)
From: Patrick Dung <patrick_dkt@yahoo.com.hk>
To: trustedbsd-audit@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Cc: 
Subject: Any good way to log all commands execuated by users?
X-BeenThere: trustedbsd-audit@FreeBSD.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: TrustedBSD Audit Discussion List <trustedbsd-audit.FreeBSD.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/trustedbsd-audit>, 
	<mailto:trustedbsd-audit-request@FreeBSD.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/trustedbsd-audit>
List-Post: <mailto:trustedbsd-audit@FreeBSD.org>
List-Help: <mailto:trustedbsd-audit-request@FreeBSD.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/trustedbsd-audit>, 
	<mailto:trustedbsd-audit-request@FreeBSD.org?subject=subscribe>
X-List-Received-Date: Sat, 06 May 2006 18:37:43 -0000

Is it possible to log all commands run by the users?

I found openbsm is included in Freebsd-current, but i can't figure a
good way to log command run by users. Logging all stat/read access to
files is not a good idea, this will generate a hugh log file and slows
down the server.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com