System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

User activity/command tracking tool

 
Kouider
Advisor

User activity/command tracking tool

Hello HP-UX fans,

I'm looking for a way within the OS (hp-ux) or with the help of another tool, where I can track the activities of any user on the system. Which is not even accessible to root,

Thanks in advance for your help

Regards ................... Ali

5 REPLIES
VK2COT
Honored Contributor

Re: User activity/command tracking tool

Hello,

 

You did not specify which version of HP-UX you use.

Let's assume some of the newer releases...

Then, the good "native" choices are:

 

RBAC offers keystroke logging

System Auditing (audsys)

 

If you want commetrcial tools, to name a few in no particular order:

 

http://www.lumension.com/Products/

 

http://www.rsa.com/node.aspx?id=1155

 

http://www.symantec.com/business/security_response/securityupdates/list.jsp?fid=esm

 

http://www.tripwire.com/it-compliance-products/te/

 

http://www.likewise.com/

 

 

Cheers,

 

VK2COT

 

VK2COT - Dusan Baljevic
Kouider
Advisor

Re: User activity/command tracking tool

you very much for your prompt reply.

 

I was wondering if there are similar tools in the free domaine?

 

TIA

Ali

Re: User activity/command tracking tool

>I was wondering if there are similar tools in the free domain?

 

RBAC is free:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Bill Hassell
Honored Contributor

Re: User activity/command tracking tool

For all versions of HP-UX, you should always enable the shell history. For the POSIX shell (/usr/bin/sh) and Korn shell (/usr/bin/ksh), you should modify /etc/profile to include these statements:

 

export HISTFILE=$HOME/.sh_history

export HISTSIZE=10000

export EDITOR=/usr/bin/vi

 

Make sure each user's HOME directory has a file called .sh_history. Use touch to create the file, then use chmod to change the ownership to that user.

 

This file will keep a log of all shell commands (and doesn't require any special software).



Bill Hassell, sysadmin

Re: User activity/command tracking tool

>then use chmod to change the ownership to that user.

 

What chmod permissions?  And then chown to change ownership.