How to track root - in CDE

[Faizer Jameel]

Dear All
I have multiple system admins and I have manged to track each root access by setting the .profile to log the history of each users activity when they su to root
by doing the follwing.
HISTFILE=/.hist/${HOME}/`who am i|awk '{ print $1}'`-`date +%d:%m:%y.%H:%M`
export HISTFILE
HISTSIZE=500
export HISTSIZE

This does not track the activities if the user has logged in through CDE.
I need to know how to track the activities of root when they are logged in through CDE.
Thankyou all
Faizer

[RAC_1]

Modify .dt/dtprofile and set .profile to true.

[Alex Glennie]

cd /

vi /.Xresources

add

*loginShell:True

exit from CDE

try again ..... result ?

[Faizer Jameel]

Nothing happened. There was no history file was created after I tried what you told me.
Thanks

[Faizer Jameel]

no luck

[Haralambos]

Do they have to login straight into CDE as root?

If not then have the following:

1. in /etc/securetty add the string 'console'
so that users will not be able to login
straight into the machine as root. They will
have to login as themselves and then
'su - root'.

2. in /etc/dt/config/Xstartup add the following code:
if [ $(id -u) = 0 ]; then
exit 1
fi

This will cause CDE to logout anyone that tries to login as root.

Then you will be able to review your /var/adm/sulog file for users that SUed into root.

Haralambos