comands overview

[aruns_s]

Hi
As a root administrator I would like to see the commands run by other users in my server.Is there any way to trace this other than refering .sh_history.


regds
Arun

[Adisuria Wangsadinata_1 · Accepted solution]

Hi Arun,

Yes, you can by turning on the trusted system on your machine and from there you can do the audit of the user on your system.

Hope this information can help you.

Cheers,
AW

[Muthukumar_5]

Is your system trusted on non-trusted. If trsuted then you can view the commands run by other users.

Else,

You have to setup history setup in /etc/profile as,

set -o ksh
# Change if you want
export HISTFILE=$HOME/.sh_history
export HISTSIZE=2000

It will log those details in history file. If you want another new solution then,

--- Edit /etc/profile --- and put this,

script -a $HOME/${LOGNAME}.log

It will automatically log all commands and results.

It is better to use HISTFILE setup to collect only files.

-Muthu

[Arunvijai_4]

Hello, Many threads are having similar question,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=217471
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=100314

Generic search,

http://www1.itrc.hp.com/service/james/search.do?searchtext=command+history&submit.x=0&submit.y=0&hpl=1&todo=search&searchcriteria=allwords&from=forums&searchcategory=ALL&rn=25&presort=rank&source=7000&esc=us.support.itrc.hp.com&wpa=forums1.itrc.hp.com%3A80&origin=0&chkServStor=on

-Arun

[aruns_s]

please advice how can I audit the coommands used by others in a trusted system

[Muthukumar_5]

check this:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=988316

--
Muthu