topic User activity/command tracking tool in Operating System - HP-UX

User activity/command tracking tool

Kouider — Sun, 18 Sep 2011 07:17:03 GMT

Hello HP-UX fans,

I'm looking for a way within the OS (hp-ux) or with the help of another tool, where I can track the activities of any user on the system. Which is not even accessible to root,

Thanks in advance for your help

Regards ................... Ali

Re: User activity/command tracking tool

VK2COT — Sun, 18 Sep 2011 07:33:51 GMT

Hello,

You did not specify which version of HP-UX you use.

Let's assume some of the newer releases...

Then, the good "native" choices are:

RBAC offers keystroke logging

System Auditing (audsys)

If you want commetrcial tools, to name a few in no particular order:

http://www.lumension.com/Products/

http://www.rsa.com/node.aspx?id=1155

http://www.symantec.com/business/security_response/securityupdates/list.jsp?fid=esm

http://www.tripwire.com/it-compliance-products/te/

http://www.likewise.com/

Cheers,

VK2COT

Re: User activity/command tracking tool

Kouider — Sun, 18 Sep 2011 09:28:26 GMT

you very much for your prompt reply.

I was wondering if there are similar tools in the free domaine?

TIA

Ali

Re: User activity/command tracking tool

Dennis Handly — Sun, 18 Sep 2011 18:52:24 GMT

>I was wondering if there are similar tools in the free domain?

RBAC is free:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Re: User activity/command tracking tool

Bill Hassell — Sun, 18 Sep 2011 23:38:46 GMT

For all versions of HP-UX, you should always enable the shell history. For the POSIX shell (/usr/bin/sh) and Korn shell (/usr/bin/ksh), you should modify /etc/profile to include these statements:

export HISTFILE=$HOME/.sh_history

export HISTSIZE=10000

export EDITOR=/usr/bin/vi

Make sure each user's HOME directory has a file called .sh_history. Use touch to create the file, then use chmod to change the ownership to that user.

This file will keep a log of all shell commands (and doesn't require any special software).

Re: User activity/command tracking tool

Dennis Handly — Mon, 19 Sep 2011 04:03:21 GMT

>then use chmod to change the ownership to that user.

What chmod permissions? And then chown to change ownership.