Re: process accounting
From: Patrascu Eugeniu (e.patrascu_at_nobugconsulting.ro)
Date: 05/27/03
- Previous message: Mike Lockhart: "more on linux hardening"
- In reply to: Reveret Julien: "Re: process accounting"
- Next in thread: Reveret Julien: "Re: process accounting"
- Reply: Reveret Julien: "Re: process accounting"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Reveret Julien <shaddai@nerim.net> Date: 27 May 2003 10:51:46 +0300
On Mon, 2003-05-26 at 21:38, Reveret Julien wrote:
>
> What you can do is patch your system with grsec patches, or patch your
> users' shell. There is a patch for bash which makes bash logs everything
> that is typed (I don't remember the url, search for bash+logging+patch).
Why don't you use the good old process accounting feature ?
psacct - process accounting. It logs every command issued by an user.
it's been distributed by every Linux vendor for years.
-- Patrascu Eugeniu <e.patrascu@nobugconsulting.ro> NoBug Consulting Romania
- Previous message: Mike Lockhart: "more on linux hardening"
- In reply to: Reveret Julien: "Re: process accounting"
- Next in thread: Reveret Julien: "Re: process accounting"
- Reply: Reveret Julien: "Re: process accounting"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|