Hi,

I have list of users who knows root password, Those users login as users then later switch as root user or super user.

My requirement is that I want to monitor the users action or the commands used by them, I tried to get it from the history file but I was unable to do it, because the users history is stored in both users history as well as root history. Do you have any Idea or solution?