How to maintain an audit trail of user command history? 2003-07-10 - By Jeff Kinz
Back
On Thu, Jul 10, 2003 at 10:01:18AM -0400, Michael Martinez wrote:
> you mean, "sar -u"?
No. (also - please don't "top-Post")
>
> On Thu, 2003-07-10 at 09:29, Jeff Kinz wrote:
> > On Thu, Jul 10, 2003 at 09:12:00AM -0400, Michael Martinez wrote:
> > > What I would like to find out, is there a way for the system to maintain
> > > its own copy of a user's command history, one that is unalterable by the
> > > user?
> >
> >
> > Turn on system accounting, use the "sa -u" command and sort the results
> > It's not quite as easy as a bash_history file but you get similar
> > results, plus cpu and memory used info.
> >
> > "man sa"
> >
> you mean, "sar -u"?
No, "sar" does not produce the same info as "sa". To see what commands
each individual user invoked sa is the tool to use.
To see detailed information about machine resources are being used on a
per process basis, "sar" is the tool to use but it will not break out
what commands each user used.
--
Jeff Kinz, Open-PC, Emergent Research, Hudson, MA. jkinz@(protected)
copyright 2003. Use is restricted. Any use is an
acceptance of the offer at http://www.kinz.org/policy.html.
Don't forget to change your password often.
Earn $52 per hosting referral at Lunarpages.
|
|
