A logging root shell

["Nils" <nils () hemmann de>]

Hi guys,
I´m looking into solutions to comply with PCI DSS requirement 10.2.2:  
(Logging: All actions taken by any individual with root or 
administrative privileges)  especially on Linux systems.
Therefore I´ve checked for ways to provide a shell which is logging all 
actions taken.
I stumbled upon stuff like:
mkfifo myfifo; logger -f myfifo & script -f myfifo
rootsh
sudoshell (ss)

What are your experiences in this realm?
Best solution would be something done with on-board means or a provided 
package of the Linux distribution, in this case Debian.


Thanks!
Nils
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com