Security Basics mailing list archives

Rv: User Tracking & Audit on Unix Systems


From: "Holden" <holden () siyahsapka com>
Date: Thu, 7 Aug 2003 10:00:47 +0300

Hi,

linspy is very nice tool, it's works for me.

http://phrack.frapes.org/phrack/50/p50-05
http://phrack.frapes.org/phrack.php?issue=50&article=5
http://www.incident-response.org/unixtools/linspy2beta1.tgz

and "screen" another tool...

http://www.gnu.org/software/screen/

--
Fatih Ozavci
IT Security Consultant


---------  Orjinal mesaj --------
Kimden: ocd () mushrappa org
Kime: security-basics () securityfocus com <security-basics () securityfocus com>
Konu: User Tracking & Audit on Unix Systems
Tarih: 06-08-03 14:02


Hello people,
I would like to learn if is there a tool to track a user when he/she logs
on
an unix server (say Linux), it mush be including which commands he/she
enter, which files he/she accessed even changed..so on... it s a kind of
session recorder maybe. I have tried &quot;GNU session&quot; but it is
possible to
escape from this tool and of course .bash_history is not enough. I am
thinking about NSA's SELinux but it is more than enough, it is complicated
and may be incompatible with my millions of applications.

PS: Maybe some of you might be know, there was a tool in IBM VM/ESA
operating system called session, something like it is exactly what i am
looking for.


Thank you in advance

---
Ozgur C. Demir



---------------------------------------------------------------------------

----------------------------------------------------------------------------









---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: