How do i find all the commands entered by root on any terminal - Page 2

Reboot · #1 (**permalink**) 10-27-2008

Quote:

Originally Posted by vampirodolce

Hi Reboot,
for some reason when I use script (/usr/bin/script) in .bashrc, as soon as the user logs in the shell goes crazy (e.g. CPU 100%) and the output file - typescript in my case - becomes huge. Do you know why?
The command 'script' on a command line works just fine, it's the .bashrc that doesn't like it. I am using Debian Etch.

Could you show the entries (or commands) you are putting in /.bashrc file......

fpmurphy · #2 (**permalink**) 10-30-2008

If you are on a Linux box, you could use Snoopy. Quoting from the Sourceforge webpage:

Quote:

Snoopy is designed to aid the task of a sysadmin by providing a log of commands executed. Snoopy is completely transparent to the user and applications. It is linked into programs to provide a wrapper around calls to execve(). Logging is done via syslogd

jim mcnamara · #3 (**permalink**) 10-27-2008

As an answer to the original problem try something like this in /etc/profile

Code:

    RU=`who am i | cut -f 1 -d " "`
    if [[ $RU = "root" ]]
      then
        HISTFILE=/someplace_safe/.ihist/.sh_hist_$RU_$$
        HISTSIZE=1000
        export HISTFILE HISTSIZE
      else
        HISTFILE=/$HOME/.sh_history
        HISTSIZE=1000
        export HISTFILE HISTSIZE
    fi

Reboot · #4 (**permalink**) 10-28-2008

Quote:

Originally Posted by jim mcnamara

As an answer to the original problem try something like this in /etc/profile

Code:

    RU=`who am i | cut -f 1 -d " "`
    if [[ $RU = "root" ]]
      then
        HISTFILE=/someplace_safe/.ihist/.sh_hist_$RU_$$
        HISTSIZE=1000
        export HISTFILE HISTSIZE
      else
        HISTFILE=/$HOME/.sh_history
        HISTSIZE=1000
        export HISTFILE HISTSIZE
    fi

This creates a history file for each root login, the mtime of the file gives you a clue as to which "root" login you are dealing with.

This is also a good Solution.........
Thanks jim mcnamara....

vampirodolce · #5 (**permalink**) 10-29-2008

Quote:

Originally Posted by Reboot

Could you show the entries (or commands) you are putting in /.bashrc file......

Hi, I am using the standard ~/.bashrc shipped with Debian, with some minor changes I made e.g. to umask, Mail, Histfilesize, Histsize and PS1 (which now shows the % of the battery):

Quote:

debian@localhost:100%~$ cat .bashrc|grep ^[^#]

[ -z "$PS1" ] && return
export HISTCONTROL=ignoredups
shopt -s checkwinsize
[ -x /usr/bin/lesspipe ] && eval "$(lesspipe)"
if [ -z "$debian_chroot" ] && [ -r /etc/debian_chroot ]; then
debian_chroot=$(cat /etc/debian_chroot)
fi
case "$TERM" in
xterm-color)
PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
;;
*)
PS1='${debian_chroot:+($debian_chroot)}\u@\h:$(echo $(acpi)|/usr/bin/cut -f4 -d\ |cut -f1 -d,)\w\$ '
;;
esac
case "$TERM" in
xterm*|rxvt*)
PROMPT_COMMAND='echo -ne "\033]0;${USER}@${HOSTNAME}: ${PWD/$HOME/~}\007"'
;;
*)
;;
esac
if [ "$TERM" != "dumb" ]; then
eval "`dircolors -b`"
alias ls='ls -F --color=auto'
fi
if [ -f /etc/bash_completion ]; then
. /etc/bash_completion
fi
umask 077
MAIL=~/Maildir
export MAIL
HISTFILESIZE=400
export HISTFILESIZE
HISTSIZE=400
export HISTSIZE

The 'script' command I used was very simple, some kind of '/usr/bin/script -q ~/file.log'

Reboot · #6 (**permalink**) 10-29-2008

Hi...
First see wether all perameters which you want to change through ~/.bashrc file, changes as per your requirement.In short wether all commands (Excluding '/usr/bin/script ) in ~/.bashrc file work fine......

If yes then just put the '/usr/bin/script -q ~/file.log' command at the very last line of your ~/.bashrc file and then see wether it works or not....

Do not put the '/usr/bin/script -q ~/file.log' command at begining or anywhere in between the ~/.bashrc file .

Hope it should work this time now.....

Cheers....

vampirodolce · #7 (**permalink**) 10-31-2008

Quote:

Originally Posted by Reboot

Hi...
First see wether all perameters which you want to change through ~/.bashrc file, changes as per your requirement.In short wether all commands (Excluding '/usr/bin/script ) in ~/.bashrc file work fine......

If yes then just put the '/usr/bin/script -q ~/file.log' command at the very last line of your ~/.bashrc file and then see wether it works or not....

Do not put the '/usr/bin/script -q ~/file.log' command at begining or anywhere in between the ~/.bashrc file .

Hope it should work this time now.....

Cheers....

Same as before. I created a sample .bashrc containing the 'script -q ~/file.txt' line only.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Displaying a dialog box using terminal commands	keshav.murthy@r	Shell Programming and Scripting	1	07-16-2008 12:36 PM
Can't login root account due to can't find root shell	neikel	AIX	2	01-30-2008 11:07 PM
How to allow root login from a specified terminal ?	XP_2600	SUN Solaris	3	11-27-2006 04:01 AM
Terminal Commands	indigoecho	UNIX for Dummies Questions & Answers	5	12-16-2003 01:41 AM
won't allow root login from another terminal to my sun	kymberm	UNIX for Dummies Questions & Answers	3	07-03-2003 01:11 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread: