Re: History Files

[taylord () INFOSECURE COM AU (David Taylor)]

Hi all,

I guess that this thread has been done to death by now, but I just wanted
to add a couple of ideas.  Would it be possible to wrap the exec()
syscalls, and write the UID and exec() args to syslog?  This would safely
write a log of all successful AND un-successful commands to a location
that is untouchable by non-root users.  I guess that you could even get
the call wrapper to check the return code from exec and write this to
syslog also.

Regards,
Dave Taylor