RE: Logging User Activity
Hi all!
How about enabling 'BSD Process Accounting' in the kernel
and installing the 'acct' package.
This will give similar (or exact, haven't tried it myself)
functionality as the OpenBSD accounting with 'accton'
so that all user commands will be logged and then viewed
with 'lastcomm'.
.2 br, Christofer.
> -----Original Message-----
> From: Mark L. Kahnt [mailto:kahnt@hosehead.dyndns.org]
> Sent: den 14 maj 2003 17:45
> To: debian-security@lists.debian.org
> Subject: Re: Logging User Activity
>
>
> On Wed, 2003-05-14 at 10:33, Michael Parkinson wrote:
> > Dear All,
> >
> > Currently implementing a number of modifications to our
> internal security
> > policies and one addition I am attempting to add is the
> full logging of user
> > activity.
>
> Are the users on the machine with shell accounts, X11 and the like, or
> passing through via ppp? There are different ways of doing things
> depending on the type of use, although the amount of detail specified
> for log files can usually cover some of what you want.
> >
> > I cannot find any simple way of achieving this within the
> standard doc's and
> > searching the web for "log user activity linux debian" does
> throw up some
> > not particularly useful links, including a package for
> filtering my users
> > output to the FBI, not much good for the UK.
>
> I dunno - the FBI and CIA probably wouldn't object to some
> more of that
> stuff gratuitously offered.
> >
> > Can anyone point me in the right direction?
> >
> > With thanks
> >
> > Mike
> >
> > ====================================================
> > http://www.ishop.co.uk/
> > Build on-line.
> > Buy online.
> > The only UK based complete e-commerce package.
> > ====================================================
> > Michael Parkinson BSc.(Hons)
> > Technical Director
> > Intellnet Limited
> > 5 Priors
> > London Road
> > Bishops Stortford
> > Herts
> > CM23 5ED
> > ====================================================
> > Phone : 01279 602800
> > DDI : 01279 602805
> > Fax : 01279 600815
> > Mobile : 07770 380511
> > ICQ No. : 47666166
> > E-mail : michael@intellnet.net.uk
> > michael@parkinson.co.uk
> > URL : http://www.intellnet.net.uk/
> > http://www.ishop.co.uk/
> > ====================================================
> --
> Mark L. Kahnt, FLMI/M, ALHC, HIA, AIAA, ACS, MHP
> ML Kahnt New Markets Consulting
> Tel: (613) 531-8684 / (613) 539-0935
> Email: kahnt@hosehead.dyndns.org
>
Reply to: