Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19
Monitor user history
Results 1 to 4 of 4

Thread: Monitor user history

Hybrid View

  1. #1

    Monitor user history

    Hi,

    I have list of users who knows root password, Those users login as users then later switch as root user or super user.

    My requirement is that I want to monitor the users action or the commands used by them, I tried to get it from the history file but I was unable to do it, because the users history is stored in both users history as well as root history. Do you have any Idea or solution?

    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

  2. #2
    Administrator Advisor peter's Avatar
    Join Date
    Apr 2004
    Posts
    882
    Try sudo and disable the users' ability to do:

    • su -
    • visudo

    I think you can set sudo to log commands. You'll need to either disable the ability for the users to edit the log files, or you could just log to a remote log host to which they don't have access.

    My sites:
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    -
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

  3. #3
    I would personally stray away from sudo, but that's me (too many exploits, too often). Use the HISTTIMEFORMAT variable in your bash rc/profile file to add timestamps to 'history', then use 'last' to find out who was logged in, and when. There is also 'whowatch', and ttysnoop; to watch them in real-time.
    arrogance breeds ignorance


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

  4. #4
    Hi friends,

    I am an system administrator, I want to monitor the users activity, My requrement is to write a script and send the user activity to my manager. Is this is possible?

    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Similar Threads

  1. Getting rid of history in a terminal
    By tech291083 in forum Redhat / Fedora
    Replies: 4
    Last Post: 05-04-2009, 07:53 AM
  2. Successfully Create a User to Monitor Audit Logs
    By herrmag in forum Windows - General Topics
    Replies: 1
    Last Post: 02-27-2007, 06:14 PM
  3. History is okay.
    By Fatal Error in forum General Chat
    Replies: 0
    Last Post: 02-17-2005, 12:04 AM
  4. History feature
    By ablemonk in forum Windows - General Topics
    Replies: 12
    Last Post: 01-27-2005, 04:27 AM
  5. Epiphany URL history
    By trickster in forum Linux - Software, Applications & Programming
    Replies: 2
    Last Post: 03-24-2004, 12:45 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •