Security Basics mailing list archives
RE: User Tracking & Audit on Unix Systems
From: "Shane Lahey" <s.lahey () roadrunner nf net>
Date: Wed, 6 Aug 2003 17:52:28 -0230
-----Original Message----- From: Ozgur C. Demir [mailto:ocd () mushrappa org] Sent: Tuesday, August 05, 2003 3:30 PM To: security-basics () securityfocus com Subject: User Tracking & Audit on Unix Systems Hello people, I would like to learn if is there a tool to track a user when he/she logs on
man lastlog
an unix server (say Linux), it mush be including which commands he/she enter, which files he/she accessed even changed..so on... it s a kind of session recorder maybe. I have tried "GNU session" but it is possible to escape from this tool and of course .bash_history is not enough. I am thinking about NSA's SELinux but it is more than enough, it is complicated and may be incompatible with my millions of applications.
man accton man lastcomm man sa
PS: Maybe some of you might be know, there was a tool in IBM VM/ESA operating system called session, something like it is exactly what i am looking for. Thank you in advance --- Ozgur C. Demir -------------------------------------------------------------------------- - -------------------------------------------------------------------------- --
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- User Tracking & Audit on Unix Systems Ozgur C. Demir (Aug 06)
- RE: User Tracking & Audit on Unix Systems Shane Lahey (Aug 06)