The UNIX and Linux Forums  
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.

Go Back   The UNIX and Linux Forums > Special Forums > Security
bash auditing bash auditing
.
google unix.com

Forums Register Forum RulesLinksAlbums FAQ Members List Calendar Search Today's Posts Mark Forums Read


Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Auditing aojmoj UNIX for Advanced & Expert Users 2 04-10-2009 04:33 PM
Solaris 9 Auditing dxs SUN Solaris 3 11-24-2008 08:19 PM
solaris BSM and Auditing skywalker850i UNIX for Dummies Questions & Answers 18 03-02-2008 09:22 PM
User Auditing rajesh_149 AIX 2 08-23-2005 02:37 AM
BMS Auditing BlueKalel SUN Solaris 0 05-11-2005 10:29 AM

Reply
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 05-31-2009
reaky reaky is offline
Registered User
  
 

Join Date: May 2009
Posts: 15
bash auditing
Hi dear friends
I have an RHEL5 installed and I gave all users on it rbash shell, Now I want to audit all commands that they did in there shell once they enter them, Can any guide me to the way
Thanks
  #2 (permalink)  
Old 05-31-2009
TonyFullerMalv's Avatar
TonyFullerMalv TonyFullerMalv is offline Forum Advisor  
Registered User
  
 

Join Date: Sep 2008
Location: Malvern, Worcs. U.K.
Posts: 717
One simple auditting is to make sure they have the history being recorded (in /etc/bash.bashrc or /etc/profile so the user cannot easily disable it) and as part of the bash logout script copy that history to somewhere for safe keeping.
  #3 (permalink)  
Old 08-19-2009
fpmurphy's Avatar
fpmurphy fpmurphy is offline Forum Staff  
Moderator
  
 

Join Date: Dec 2003
Location: Florida
Posts: 1,859
bash does not have an auditing feature. If you are happly to build and deploy a custom version of bash, there are patches available on the web to add auditing facilities.
Sponsored Links
Reply

Bookmarks

« can another user 777 and existing 777 dirctory? | Logging shell commands and send it out »
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Linear Mode Linear Mode
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -4. The time now is 05:39 AM.

The UNIX and Linux Forums - Learn UNIX and UNIX Commands RSS Feeds - Contact Us - The UNIX and Linux Forums - Learn UNIX and UNIX Commands - Archive - Top

Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language translation by Google.
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0