LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-09-2010, 01:46 AM   #1
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Rep: Reputation: 19
Question How can I acomplish this ?


Hy everyone, I have a question about a kind of a logger for my debian.
I have a little project, where I'm teaching my collegs basics of the linux. so they will get a clean installed debian, with only ssh acces,
they must then do few basic things like aditing with vi, locating files etc...
what I want to do is to log all they do, so after they login to the system, everything they do, must be logged sothat I can see where they made mistakes, like for example what they typed, what they copied, what they uploaded or downloaded, etc... all handlings must be in a log.

anybody know how can I do this ?

thanks in advance...
 
Old 06-09-2010, 02:40 AM   #2
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hello,

Have a look at process accounting (pacct). I believe it'll do just what you need.

Kind regards,

Eric
 
Old 06-09-2010, 04:19 AM   #3
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
any other options ?
 
Old 06-09-2010, 04:25 AM   #4
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hi,

What you could do, if you feel reluctant to pacct, is write you own script to 'synchronize' the history files of the users. That way you'll have a copy of what they have done. Or you could install and configure Unison File Synchronizer to do the same thing for you. But then you'll have to learn about Unison. Either way you'll have to put in some time, either to install, learn or write.

If you have lots of time you can always browse the user's history files but if they clear them you're left with nothing.

The history files only reflect what commands they have run, not when they logged in, how long they stayed logged in, and so on. In my opinion pacct is the best choice for what you need.

Kind regards,

Eric

Last edited by EricTRA; 06-09-2010 at 04:27 AM.
 
Old 06-09-2010, 05:13 AM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by turalo View Post
what I want to do is to log all they do
/
Quote:
Originally Posted by EricTRA View Post
In my opinion pacct is the best choice for what you need.
Over the years we've seen quite a few "I want to log everything" questions asked and 'pacct' does not cut it. If you can handle having your opinion changed please search the LQ forum for posts about 'rootsh' or see just a few results:
http://www.linuxquestions.org/questi...4/#post3950747
http://www.linuxquestions.org/questi...tivity-801565/
http://www.linuxquestions.org/questi...1/#post3690455
http://www.linuxquestions.org/questi...3/#post3637958
http://www.linuxquestions.org/questi...9/#post3604944
http://www.linuxquestions.org/questi...7/#post2980353
http://www.linuxquestions.org/questi...1/#post2894989
http://www.linuxquestions.org/questi...3/#post2631551

HTH
 
1 members found this post helpful.
Old 06-09-2010, 05:26 AM   #6
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Quote:
Originally Posted by unSpawn View Post
Hi unSpawn,

I'm always open for a change, even of my own opinion I'll have a look at those threads, thanks for the info.

Kind regards,

Eric
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:51 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration