3 Sep
2007
3 Sep
'07
6:20 p.m.
On 9/3/07, Mag Gam magawake@gmail.com wrote:
Bazy:
Thanks. I hope in the future version of auditd, it will be much easier to monitor user's activities.
You can also run psacct which will also do other auditing commands.
yum install psacct chkconfig --level 2345 psacct on lastcomm
which will tell user commands BUT will not tell arguments and such. aureport and its associated commands will tell you more but you need to also load up a ruleset like CAPP or LSPP to get more info.
--
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"