Find the answer to your Linux question:
Results 1 to 3 of 3
Hi dear friends I have an RHEL5 installed and I gave all users on it rbash shell, Now I want to audit all commands that they did in there shell ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    May 2009
    Posts
    5

    bash auditing


    Hi dear friends
    I have an RHEL5 installed and I gave all users on it rbash shell, Now I want to audit all commands that they did in there shell once they enter them, Can any guide me to the way
    Thanks

  2. #2
    tpl
    tpl is offline
    Linux User
    Join Date
    Jan 2007
    Location
    cleveland
    Posts
    478
    perhaps you could set bash up so as to save a user's
    commands in "/root/history.user" or some such, and then
    peruse at your leisure.

    from "man bash"

    HISTFILE

    The name of the file in which command history is saved
    (see HISTORY below). The default value is
    ~/.bash_history.
    the sun is new every day (heraclitus)

  3. #3
    Linux Newbie
    Join Date
    Feb 2009
    Posts
    101
    auditd services.

  4. $spacer_open
    $spacer_close

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •