Re: Building up a shell service.

From: Kurt Yoder (kylist@shcorp.com)
Date: 10/25/01 

Message-ID: <3BD80B9B.E1B52740@shcorp.com>
Date: Thu, 25 Oct 2001 08:54:51 -0400
From: Kurt Yoder <kylist@shcorp.com>
To: Jose Nazario <jose@biocserver.BIOC.cwru.edu>, focus-linux@securityfocus.com
Subject: Re: Building up a shell service.

Jose Nazario wrote:
>
> On Tue, 23 Oct 2001, Praise wrote:
>
> > I am trying to log what they write on the shell too. I think this can
> > be accomplished by simply making .bash_history append only, but it
> > does not get the timestamps. A better solution would be appriciated!
>
> so i execute "/bin/csh" and voila, no bash history logged. or i use perl
> or tclsh or something that doesn't log.
>
> instead use ttysnoop. logs the session so you can see what they did.
> cannot be escaped.

Ttysnoop will not work with openssh unless you recompile it with
LOGIN_PROGRAM set to the path of your ttysnoops program in pathnames.h
and then set "UseLogin" to True. At least, this was what I heard when I
posted to an OpenSSH mailing list; haven't tried it yet (see the ongoing
thread about "virtual terminal dump").