Re: How to log all commands?

From: Nekromancer (foo_at_bar.org)
Date: 05/30/05


Date: 30 May 2005 14:12:12 GMT

Davide Bianchi <davideyeahsure@onlyforfun.net> wrote in
news:slrnd9lsv9.2eq.davideyeahsure@fogg.onlyforfun.net:

>> How can I log all commands (including parameters) typed at any of the
>> virtual terminals in a Linux server?
>
> You could use process accounting, but already the commands are saved
> in the .bash_history files for each user, so just preserving those
> should give you a lot of information (a part for time and date).
>

Hi Davide,

Thanks for your answer.
I was aware of .bash_history, and I can even mark them as "append only"
from LIDS, but it'll be good if I can send that information to the central
secure syslog machine. Perhaps I can prepare something via cron...
OTOH, I'll investigate on the use of process accounting.
Cheers,

Mike