Logging all user activity
2007-12-24 19:56:00
I have his profile set up as follows:
-rw-r--r-- 1 root users 59 May 17 11:30 .profile
[Why is he able to move this .profile file around but can't modify it -- how can I make
him not able to move it, nor modify it, just read it.]
in there i have:
exec script /tmp/script/.`date +%m-%d.`$$
Problem with this is that it tells him he is being scripted
and where the script file is located.
On FreeBSD script has -q option to make it quiet, so that the user has no
idea he is being scripted. nada similar for this script under `man script`
So what does everyone use if they want to log
all activity of a particular user?
I dont' need real time logging 'ie -- snooping', just that all his command/output
goes into a file -- and to make it harder for him to know he is being scripted
and where that file is located.
www.nul.cjb.net
www.FreeBSD.org
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
Comments
Got something to say?
You must be logged in to post a comment.
