Log all commands used in a Session....how?

vous · 03-19-2005, 09:42 AM

Hello,

I would like to know how I could log all the commands a user uses (kind of like .bash_history does) while he/she is in my server. The purpose for this is security. So if someone logs in via the network/internet, and does any nasty stuff, I could always look into the file and see what they did.

Any thoughts on how I could do this?

btmiller · 03-19-2005, 02:45 PM

Turn on process accounting. Unfortunately, many distros' kernels don't have process accounting enabled, so you may need to do a kernel recompile and get the user space tools. Google should be able to tell you more.

vous · 03-20-2005, 05:32 AM

OK, how do I know if my kernel has that feature?