Archiving History files

[dninja at gmail.com (Robin Wood)]

2010/1/19 Carlos Perez <carlos_perez at darkoperator.com>:
> Is it a shared system? if it is and the user is not root create a cron job
> to do the copy of the file every x time.

I was thinking that as well but the history file isn't written to till
the user logs out so if they clear it down all you'll ever get is an
empty file.

Robin

> On Tue, Jan 19, 2010 at 6:50 AM, Monkey Daemon
> <monkeywebdaemon at googlemail.com> wrote:
> > Hi,
> >
> > I've just discovered a system on which one of our darling users has
> > decided adding a script to his .bash_logout file that removes
> > .bash_history on logout is a clever thing to do.
> >
> > Is there a way to take a copy of the .bash_history file before it is
> > deleted? This user obviously has something to hide as far as I'm
> > concerned, so I need to archive this file to present it as evidence.
> >
> > Thanks in advance,
> >
> > MWD.
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com