RE: Command history log for audit trail

["James Stevenson" <james@stev.org>]

Hi,

Have a look at snoopy.
It is a execve wrapper that prints out the commands run to syslog

	James

> -----Original Message-----
> From: Mart Frauenlob [mailto:mart.frauenlob@chello.at]
> Sent: 21 June 2006 09:25
> To: debian-security@lists.debian.org
> Subject: Re: Command history log for audit trail
> 
> 
> 
> prosolutions@gmx.net wrote:
> >
> > I need to set up an audit trail for all commands run on machines.  I
> > know that the auth.log records who logs in and when, and that each
> > user's .bash_history has a history of their commands.  But is there some
> > other way to create a log for all commands run on a system?
> >
> 
> i.e. http://ttyrpld.sourceforge.net/
> 
> 
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org