<a href="http://sourceforge.net/projects/rootsh/">http://sourceforge.net/projects/rootsh/</a><br><br>and from a co-worker<br><br><a href="http://etbe.coker.com.au/2010/06/11/logging-shell-commands/">http://etbe.coker.com.au/2010/06/11/logging-shell-commands/</a> <br>
<br>has some slick ideas<br><br>I've used rootsh before. With additional hardening like the log file area for rootsh being append only filesystem and the chattr being locked up with selinux it make a pretty solid logging system<br>
<br><div class="gmail_quote">On Wed, Jun 16, 2010 at 10:50 AM, James Taylor <span dir="ltr"><<a href="mailto:James.Taylor@eastcobbgroup.com">James.Taylor@eastcobbgroup.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Is there a good method for auditing command line operations, similar to bash_history that is not accessible to the user? bash_hisory is functional, but can be edited or deleted by the user.<br>
Something that is included with a SLES distribution is highly desirable, but if there are some good options, one of them may already be there.<br>
I've had one suggestion for snoopy, but I don't think it's included with SLES.<br>
Thanks,<br>
-jt<br>
<br>
<br>
<br>
James Taylor<br>
The East Cobb Group, Inc.<br>
678-697-9420<br>
<a href="mailto:james.taylor@eastcobbgroup.com">james.taylor@eastcobbgroup.com</a><br>
<a href="http://www.eastcobbgroup.com" target="_blank">http://www.eastcobbgroup.com</a><br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>Actively in pursuit of Life, Liberty and Happiness <br>Doing pretty well on all 3 pursuits <br><br> Faith is a cop-out. If the only way you can accept an assertion is by faith, then you are conceding that it can’t be taken on its own merits.<br>
Dan Barker, "Losing Faith in Faith", 1992 <br><br>