loging user's commands

From: Juan Ignacio Trentalance (TRENTALANCE@crm.com.ar)
Date: 12/18/01

From: Juan Ignacio Trentalance <TRENTALANCE@crm.com.ar>
To: "'focus-linux@securityfocus.com'" <focus-linux@securityfocus.com>
Date: Tue, 18 Dec 2001 15:35:19 -0300


Does anybody know a way to log everything a user types and sees on a ssh or
telnet "console"?

It's not that I am trying to violate the user's privacy, but that it is a
very sensity server, and I want to be sure that some users do only what they
are supposed to. These users will be notified.

I came up with the idea of using "exec /usr/bin/script" on the user's
profile or something like that, but that seems very easy to foul if you are
smart enough. If you know of a (preferably open source) product that can do
this, I will be very thankfull.

Thanks in advance,