Question for all sysadmins.
How do you keep track of what commands each user uses on his account. I thought an easy way is to monitor .bash_history, however those files can be "edited" by the user.
Is there a permission combination that will allow the shell to record to it but yet they can't edit... (12 Replies)
During the course of the session before I logout I see some of the commands listed from my previous session but not from my current session and after I logout and log back in I see the commands which I ran before logging out.
Does the .bash_history stay in the buffer or someplace else then?
... (2 Replies)
Dear All,
I am creating users on our servers. the .bash_history supposed to store all the commands entered by the user. My question is, how can I prevent the user himself from editing or viewing this file?
I have tried chaning the owner of the .bash_history to be the root user but... (5 Replies)
Hi All,
I have a file disk_space.log.
cat disk_space.log
94% /
32% /boot
38% /mnt/data
100% /media/CDROM
I want the output, like
cat disk_space.log
94% /
100% /media/CDROM
That means print the line those are grater-than 90%. And rest of the line is remove from file.
I have a... (2 Replies)
Hi - user commands are written in . bash_history of that user when he logs out. my bash_history file shows. not sure what that number means
#1329618972
ls -la
#1329618978
ls
#1329618980
ls -la
my bash_profile looks like this
PATH=$PATH:$HOME/bin
export PATH
export... (3 Replies)
rm -rf .bash_history some one ran rm -rf .bash_history on my Linux server(SUSE),I can see this command being run in current history, but I want the OLD history as well,can I recover the old history back. (9 Replies)
Hi would like to ask if there is anyway to display .bash_history with timestamp using shell script?
i know that you should use history command with HISTTIMEFORMAT="%d/%m/%y %T " to display it in terminal but it does not work when i use it on shell script. It seem that you can't run history... (1 Reply)
I am using the bash shell.
When I view my recent command history using the "history" command from the prompt, it only shows me the commands starting at #928.
The commands I need are earlier than that, but I can't figure out how to make the other 927 display.
They are in my .bash_history... (1 Reply)
I'm usia Raspbian, a Debian subset, and wondering what work would be involved in altering the cp command.
cp at present needs a full path and file name for source and at least full filename for destination. How can I change this so the second parameter isn't needed? So if the destination... (6 Replies)
Discussion started by: MuntyScrunt
6 Replies
LEARN ABOUT NETBSD
utmpx
UTMPX(5) BSD File Formats Manual UTMPX(5)NAME
utmpx, wtmpx, lastlogx -- user accounting database
SYNOPSIS
#include <utmpx.h>
DESCRIPTION
In contrast to utmp and wtmp, the extended databases in utmpx and wtmpx reserve more space for logging hostnames, and also information on a
process' ID, termination signal and exit status.
The <utmpx.h> header defines the structures and functions for logging user. Currently logged in users are tracked in /var/run/utmpx, a list
of all logins and logouts, as well as all shutdowns, reboots and date changes, is kept in /var/log/wtmpx, and the last login of each user is
noted in /var/log/lastlogx.
The interface to the utmpx file is described in getutxent(3).
The wtmpx file can grow rapidly on busy systems, and is normally rotated with newsyslog(8).
In the event of a date change, a shutdown, or a reboot, the following items are logged in the wtmpx file:
date The system time has been manually or automatically updated by date(1). The command name date is recorded in the field
ut_name. In the field ut_line, the character '|' indicates the time prior to the change, and the character '{' indicates
the new time.
reboot
shutdown A system reboot or shutdown has been initiated. The character '~' is placed in the field ut_line, and reboot or shutdown
in the field ut_name (see shutdown(8) and reboot(8)), using logwtmpx(3).
FILES
/var/run/utmpx The utmpx file.
/var/log/wtmpx The wtmpx file.
/var/log/lastlogx The lastlogx file.
SEE ALSO last(1), login(1), rwho(1), w(1), who(1), endutxent(3), logwtmpx(3), utmp(5), ac(8), init(8), newsyslog(8), reboot(8)BSD January 31, 2007 BSD