05-19-2016
You could try a number of tweaks, such as:-
- On login, set the command history file to one based on the connecting IP address
- Collect all commands issued by a tty session and write them to the syslog, including the connecting IP address
- Intercept the kill command with a script that logs the process id and details of the process before calling the real kill command
- Some other variation?
Of course, all of these can bypassed, but they might give you a clue if someone forgets. The best method is to set up separate accounts for each user so that they cannot do this in the first place. You are exposing yourself to untold horrors from mistakes and malicious attack.
Is there a good reason for not having separate user accounts, or is it just 'easy'. Remember that security is like contraception - people may not like it but the cost of mistakes can be enormous.
I hope that the above suggestions may help,
Robin
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
Hi,
I want to execute a script - of different user from my script.
I have tried the su command
su - username -c "scriptname"
it works but asked for password.
Is there any way for supplying the password to it thru script, not interactively.
Or is there any other way to achieve the... (5 Replies)
Discussion started by: yeheyaansari
5 Replies
2. UNIX for Dummies Questions & Answers
How do i in a script determine the user that is executing it? (2 Replies)
Discussion started by: Chiefos
2 Replies
3. UNIX for Dummies Questions & Answers
Hi,
I need to execute the following unix command through my java code -
zip -e
When i execute this command from the command prompt, i am prompted for a password in the following manner -
Enter password:
Verify password:
Is it possible to provide the password inthe first command itself... (5 Replies)
Discussion started by: jacob23
5 Replies
4. UNIX for Dummies Questions & Answers
I have two machines, one running Windows and another one Unix over a network. I want to execute a batch file on the Windows machine using a script running on the Unix machine.
I have tried creating a rsa key and transferrring it to the destination machine but it doesn't work. The purpose was to... (3 Replies)
Discussion started by: MobileUser
3 Replies
5. UNIX for Dummies Questions & Answers
When trying to find a list of files with specific text in them using
find . -type f -exec grep -l "DataStage Job 4263" {}\;
I get error
find: missing argument to 'exec'
How can I correct this ? I'm on Linux Red Hat.
Cheers
PS I'm a DataStage programmer not a systems support... (4 Replies)
Discussion started by: jackdaw_at_work
4 Replies
6. UNIX for Advanced & Expert Users
Hi all,
Just need some help the following scenario,
Is there any UNIX command to find the unix machine type (like whether the machine is belongs to Ssun ultra 45 type) like that .. please help me (2 Replies)
Discussion started by: abhisheksunkari
2 Replies
7. Shell Programming and Scripting
Hi All,
i have two machines like x and y . my requirement is i should connect to machine Y from x through ssh connection . and do some operation such as copy and move and delete files in Y machine .
i tried with this code but it is doing in machine x only . and i need to exit from Y when... (1 Reply)
Discussion started by: rateeshkumar
1 Replies
8. UNIX for Dummies Questions & Answers
Buddies, I am trying to copy the file 'xcopyq' from /home/sandip to /home/sandip/testdir using the below command and getting the error as shown below:-
sandip@manu:~$ find /home/sandip -type f -name '*xcopyq*' -exec cp{} /home/sandip/testdir/ \:
find: missing argument to `-exec'
Am I... (2 Replies)
Discussion started by: sandip250382
2 Replies
9. Shell Programming and Scripting
Running below command , but unable to print the filename , is there way to print filename/dirname using -print option
find . -type f -exec aclput -i fileacl.template {} \; (5 Replies)
Discussion started by: lalitpct
5 Replies
10. UNIX for Dummies Questions & Answers
hi
how to restrict a user ro run rm command.
In this scenario we have a user/group has below in sudoers
user ALL=(ALL) ALLis there a way to restrict the user from just executing rm command (9 Replies)
Discussion started by: robo
9 Replies
LEARN ABOUT X11R4
genlib_copy_up_all_con
GENLIB_COPY_UP_ALL_CON.3(October 1, 1997) GENLIB_COPY_UP_ALL_CON.3(October 1, 1997)
NAME
GENLIB_COPY_UP_ALL_CON - copy all physical connectors of an instance face in the current figure
SYNOPSYS
#include <genlib.h>
void GENLIB_COPY_UP_ALL_CON(face, insname, concatenate)
char face, concatenate;
char *insname;
ORIGIN
This software belongs to the ALLIANCE CAD SYSTEM developed by the ASIM team at LIP6 laboratory of Universite Pierre et Marie CURIE, in
Paris, France.
Web : http://asim.lip6.fr/recherche/alliance/
E-mail : alliance-users@asim.lip6.fr
PARAMETERS
face Face of the instance
insname Name of the instance the connector belongs to
concatenate Indicates wheter or not to concatenate instance connectors names with instance name
DESCRIPTION
COPY_UP_ALL_CON copies all instance connectors of the face face of the placed instance called insname into the current layout. The con-
catenate argument may take two values:
YES then the resulting name of a connector in the current figure is the concatenation of the insname and the conname. It
warranties the unicity of name at the figure level, and is to be used most of the time.
NO implies a direct copy of the connector name. The user must take care of the unicity of connector name by itself.
Two behaviour are expected, depending on each of the instance connectors location regarding the abutment box of the
current figure.
Connector on the abutment box
The figure connector is place right over the instance connector. The single connector is duplicated.
Connector inside the abutment box
The instance connector face is computed in the figure, and then, the connector is duplicated on the given face, at the
right coordinates for this face. Then a wire is drawn between the instance connector and the figure connector in the
connector layer.
ERRORS
"GENLIB_COPY_UP_ALL_CON impossible : missing GENLIB_DEF_PHFIG"
No figure has been yet specified by a call to DEF_PHFIG. So it isn't possible to place a connector inside it. you must call
DEF_PHFIG before any other layout action.
"*** genlib error *** GENLIB_COPY_UP_ALL_CON impossible : connector conname face face of instance insname, current figure doesn't exist"
No connector matches both the conname and the face arguments.
EXAMPLE
#include <genlib.h>
main()
{
/* Create a figure to work on */
GENLIB_DEF_PHFIG("cell");
.
.
GENLIB_PLACE_LEFT("gaer0_f", "insN", SYMXY);
.
.
GENLIB_DEF_AB(0L, 0L, 0L, 0L);
/* Copy all connectors */
GENLIB_COPY_UP_ALL_CON(NORTH, "insN", YES);
/* Save that on disk */
GENLIB_SAVE_PHFIG();
}
SEE ALSO
genlib(1), GENLIB_DEF_PHFIG(3), GENLIB_SAVE_PHFIG(3), GENLIB_COPY_UP_CON(3), GENLIB_COPY_UP_CON_FACE(3), GENLIB_PHCON(3), GEN-
LIB_THRU_CON_H(3), GENLIB_THRU_CON_V(3).
BUG REPORT
This tool is under development at the ASIM department of the LIP6 laboratory.
We need your feedback to improve documentation and tools.
PROCEDURAL GENERATION LANGUAGE
ASIM/LIP6 GENLIB_COPY_UP_ALL_CON.3(October 1, 1997)