User activity/command tracking tool

[Kouider]

Hello HP-UX fans,

I'm looking for a way within the OS (hp-ux) or with the help of another tool, where I can track the activities of any user on the system. Which is not even accessible to root,

Thanks in advance for your help

Regards ................... Ali

[VK2COT]

Hello,

You did not specify which version of HP-UX you use.

Let's assume some of the newer releases...

Then, the good "native" choices are:

RBAC offers keystroke logging

System Auditing (audsys)

If you want commetrcial tools, to name a few in no particular order:

http://www.lumension.com/Products/

http://www.rsa.com/node.aspx?id=1155

http://www.symantec.com/business/security_response/securityupdates/list.jsp?fid=esm

http://www.tripwire.com/it-compliance-products/te/

http://www.likewise.com/

Cheers,

VK2COT

[Kouider]

you very much for your prompt reply.

I was wondering if there are similar tools in the free domaine?

TIA

Ali

[Dennis Handly]

>I was wondering if there are similar tools in the free domain?

RBAC is free:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

[Bill Hassell]

For all versions of HP-UX, you should always enable the shell history. For the POSIX shell (/usr/bin/sh) and Korn shell (/usr/bin/ksh), you should modify /etc/profile to include these statements:

export HISTFILE=$HOME/.sh_history

export HISTSIZE=10000

export EDITOR=/usr/bin/vi

Make sure each user's HOME directory has a file called .sh_history. Use touch to create the file, then use chmod to change the ownership to that user.

This file will keep a log of all shell commands (and doesn't require any special software).

[Dennis Handly]

>then use chmod to change the ownership to that user.

What chmod permissions?  And then chown to change ownership.