Sponsored Content
Operating Systems AIX Bullet proof of user history activity Post 302278491 by aixylinux on Tuesday 20th of January 2009 10:32:26 AM
Old 01-20-2009
I saw an interesting take on this problem once. Only Operations had the root password, and management approval was required to give it out. Admins gained root access by running a shell script (call it suroot) which called the script command to direct the screen activity to a temporary file, then called sudo to put the caller into root shell. When root was exited the script sent the screen output file to a remote security server. When root was entered and exited, an email was sent to the security server. This did not prevent the root user from removing or altering the temporary script file, so it was no proof against clever malice. But an audit that showed entry and exit without a screen file would have been flagged. But even that might have been hacked. The tool was more for a record of what was done, which was useful for honest admins to diagnose a goof-up.

In your case, this is closing the barn door. If you can't trust root, who can you trust?
 

9 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Force user to disconnect if no activity

Does anybody know how to force a user to automatically logoff a UNIX session if there is no keyboard activity for a period of time? We use COBOL and there is a BEFORE TIME option on the ACCEPT command, however, we do not want to change the many programs we have to detect this. What we really... (3 Replies)
Discussion started by: MarkN
3 Replies

2. UNIX for Dummies Questions & Answers

audit user activity - possible?

Hi, I have been asked if it is possible to track the last time a specific user logged in to the sysetm. checked my documentation but can't see it there - google is not being very helpful either. I wonder if someone here can help - it will be much appreciated. Thanks Suresh (1 Reply)
Discussion started by: sureshy
1 Replies

3. Shell Programming and Scripting

SVN activity of certain user

Hi there, I'm looking for some help to get a little script done that shows me (or counts) only the added lines from an SVN repository of one specific user. Anybody has an idea? Thanks, Michael (0 Replies)
Discussion started by: MichaelGiese
0 Replies

4. UNIX for Dummies Questions & Answers

Commands to monitor other user's activity

What commands would you recommend in order to monitor things like when a user logs on to a server, assuming you know that user's name on the server? (2 Replies)
Discussion started by: Sotau
2 Replies

5. UNIX for Advanced & Expert Users

History to Another file [local user history , but root access]

Hi all, My need is : 1. To know who , when , which command used. 2. Local user should not delete this information. I mean , with an example , i can say i have a user user1 i need to give all the following permissions to user1, : a. A specific directory other than his home... (3 Replies)
Discussion started by: linuxadmin
3 Replies

6. UNIX for Dummies Questions & Answers

History to Another file [local user history , but root access]

Hi all, My need is : 1. To know who , when , which command used. 2. Local user should not delete this information. I mean , with an example , i can say i have a user user1 i need to give all the following permissions to user1, : a. A specific directory other than his home... (1 Reply)
Discussion started by: sriky86
1 Replies

7. Shell Programming and Scripting

Audit user activity

Need some help in coming up to log all the activity that is used with our common "unix account". Ideally I am looking for to log the activity in a "separate" file for each session or login until the user logout, I would like to capture the date/time and terminal login and record all the ... (3 Replies)
Discussion started by: rajmanna
3 Replies

8. UNIX for Dummies Questions & Answers

How to track user activity?

Hi All Please can you help me with the following issue: A certain vendor installed an application in which for a user to log in; the user must use a user created/predefined by the application. And because this application has more than one user its difficult to track who did what and when,... (6 Replies)
Discussion started by: fretagi
6 Replies

9. UNIX for Advanced & Expert Users

Track activity of a user

Hi All We have a job which writes files to a server at a particular time. The files will be created by a particular user ID Today, during the execution of the job, it created a file to the server and the file sat on the server for sometime, but was deleted immediately at the end of the... (4 Replies)
Discussion started by: sparks
4 Replies
dtc_install_centos(8)					      System Manager's Manual					     dtc_install_centos(8)

NAME
dtc_install_centos - bootstrap a CentOS install to use in a chroot or VM SYNOPSIS
dtc_install_centos <install root> <yum environment> DESCRIPTION
This shell script is part of the dtc-xen package, generally to be used by the dtc panel to install a new a Xen VPS server. This script is called by dtc_reinstall_os when the user chooses to install the CentOS operating system. How it works: it generates a temporary yum configuration in the yum environment directory, that directs yum to act inside the install root instead of in the base system; then it kindly requests yum to install the basesystem, centos-release and yum packages onto it. Yum then uses the configuration to download the required (usually, security-updated) packages and then perform the RPM installation process under the install root. It requires both RPM and yum. It does work under Debian (it was developed in Ubuntu first). It should also work on RPM-based systems without destroying the system-wide RPM and yum configurations. OPTION
<install root> Target directory where CentOS will be deployed. Must exist beforehand. <yum environment> Directory where yum will store the repository manifests and configuration. Will be automatically created. Cached RPMs and manifests will be left, as usual, in a directory var/cache/yum inside the install root. EXAMPLE
dtc_install_centos /root/yum /xen/13 This will setup the operating system in /xen/13, with the CentOS configuration folder in /root/yum. BUGS
It's limited to CentOS 5 at the moment. It must be run as root. Under some circumstances, the installation process itself may kill processes running on the host machine. The chroot yum does should be sufficient to avoid this, but we haven't been able, yet, to ascertain why this fails sometimes. SEE ALSO
dtc_reinstall_os(8) VERSION
This documentation describes dtc_install_os version 0.3.1. See http://www.gplhost.com/software-dtc-xen.html for updates. dtc_install_centos(8)
All times are GMT -4. The time now is 02:28 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy