topic comands overview in Operating System - HP-UX

comands overview

aruns_s — Mon, 02 Jan 2006 21:25:28 GMT

Hi
As a root administrator I would like to see the commands run by other users in my server.Is there any way to trace this other than refering .sh_history.

regds
Arun

Re: comands overview

Adisuria Wangsadinata_1 — Mon, 02 Jan 2006 21:47:57 GMT

Hi Arun,

Yes, you can by turning on the trusted system on your machine and from there you can do the audit of the user on your system.

Hope this information can help you.

Cheers,
AW

Re: comands overview

Muthukumar_5 — Tue, 03 Jan 2006 02:50:35 GMT

Is your system trusted on non-trusted. If trsuted then you can view the commands run by other users.

Else,

You have to setup history setup in /etc/profile as,

set -o ksh
# Change if you want
export HISTFILE=$HOME/.sh_history
export HISTSIZE=2000

It will log those details in history file. If you want another new solution then,

--- Edit /etc/profile --- and put this,

script -a $HOME/${LOGNAME}.log

It will automatically log all commands and results.

It is better to use HISTFILE setup to collect only files.

-Muthu

Re: comands overview

Arunvijai_4 — Tue, 03 Jan 2006 02:56:40 GMT

Hello, Many threads are having similar question,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=217471
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=100314

Generic search,

http://www1.itrc.hp.com/service/james/search.do?searchtext=command+history&submit.x=0&submit.y=0&hpl=1&todo=search&searchcriteria=allwords&from=forums&searchcategory=ALL&rn=25&presort=rank&source=7000&esc=us.support.itrc.hp.com&wpa=forums1.itrc.hp.com%3A80&origin=0&chkServStor=on

-Arun

Re: comands overview

aruns_s — Tue, 03 Jan 2006 17:45:11 GMT

please advice how can I audit the coommands used by others in a trusted system

Re: comands overview

Muthukumar_5 — Wed, 04 Jan 2006 01:35:13 GMT

check this:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=988316

--
Muthu