Security Basics mailing list archives

RE: User Tracking & Audit on Unix Systems


From: "Shane Lahey" <s.lahey () roadrunner nf net>
Date: Wed, 6 Aug 2003 17:52:28 -0230



-----Original Message-----
From: Ozgur C. Demir [mailto:ocd () mushrappa org]
Sent: Tuesday, August 05, 2003 3:30 PM
To: security-basics () securityfocus com
Subject: User Tracking & Audit on Unix Systems

Hello people,
I would like to learn if is there a tool to track a user when he/she logs
on
man lastlog

an unix server (say Linux), it mush be including which commands he/she
enter, which files he/she accessed even changed..so on... it s a kind of
session recorder maybe. I have tried "GNU session" but it is possible to
escape from this tool and of course .bash_history is not enough. I am
thinking about NSA's SELinux but it is more than enough, it is complicated
and may be incompatible with my millions of applications.
man accton
man lastcomm
man sa


PS: Maybe some of you might be know, there was a tool in IBM VM/ESA
operating system called session, something like it is exactly what i am
looking for.


Thank you in advance

---
Ozgur C. Demir


--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: