- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Capture commands ran by a user
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 12:56 AM
07-17-2013 12:56 AM
Capture commands ran by a user
Hi ,
Am using following entry in my /etc/profile to capture commands ran by a users in our 11iv2 servers:
export LOGINNAME=`who am i | awk '{print $1}'`
export HISTFILE="/var/tmp/hist_`date +%y%m%d.%H%M%S`.${LOGINNAME}.$LOGNAME.$$"
My question is all users are able to see this setting when they log in using "env" variable ,
is there any way such that the user will never come to know as to were am i logging his/her history ???
- Tags:
- history
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 01:25 AM - edited 07-17-2013 01:27 AM
07-17-2013 01:25 AM - edited 07-17-2013 01:27 AM
Re: Capture commands ran by a user
>is there any way such that the user will never know as to were am I logging his/her history?
No. The history mechanism is not meant to be the security police.
If you unset it at the end of /etc/profile, then the user could change it and start a new shell.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 01:26 AM
07-17-2013 01:26 AM
Re: Capture commands ran by a user
Ok.
Can i move the entries to a location which has root access only ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 01:28 AM
07-17-2013 01:28 AM
Re: Capture commands ran by a user
>Can I move the entries to a location which has root access only?
No, the user would no longer be able to write to it. Nor read it to look at his history.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 04:02 AM
07-17-2013 04:02 AM
Re: Capture commands ran by a user
We do not want to enable auditing which will create large junk files.
Instead do we have option of rotating those log files ?
Can i copy it instead of moving it?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 05:06 AM
07-17-2013 05:06 AM
Re: Capture commands ran by a user
>Instead do we have option of rotating those log files?
Are you now talking about auditing or about the history file?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2013 06:23 AM
07-17-2013 06:23 AM
Re: Capture commands ran by a user
Hi Dennis ,
Rotating am asking for audit files.
And if we can copy history , that would be really great .
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2013 05:08 AM
07-18-2013 05:08 AM
Re: Capture commands ran by a user
Hi Guys,
Awating reply .