Login or Register to Ask a Question and Join Our Community


Shell Programming and Scripting

user auditing

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting user auditing
# 1  
Old 06-17-2010
user auditing
Hello,
is there some way to track what shell commands some user is executing ?
Something like to have some log file where i could see what commands some user used, e.g. rm -r dirname , ls -l .... and so on ...
I have 2.6.13-1.1526_FC4smp
# 2  
Old 06-17-2010
reading this might be helpful
# 3  
Old 06-17-2010
command history
# 4  
Old 06-17-2010
history -100 (if u want more commands..) just increase the no....

this is the easiest way if u guys are based on same server....
# 5  
Old 06-17-2010
I already tried history but withoud help...
the thing is that i would like to see what commands is winscp using...
And when i go to history of the user with whom i am doing that commands through the winscp, i don't see that commands...
Smilie
# 6  
Old 06-17-2010
If you are on Solaris, you can turn on BSM (Basic Security Mode) and log all commands executed on the system, including full command line, arguments and environment, using the "-setpolicy +argv, arge" directive. Man audit_control for more information.
This User Gave Thanks to fpmurphy For This Post:
tonijel
# 7  
Old 06-17-2010
Auditing issue is very detailed state..I according to me you must decide exaclty what objects will be in your audit records and you must run audit this form..
You can look in this page howto this

http://docs.sun.com/app/docs/doc/816...&q=audit+files

And so you can configure some flags like below in your audit conf (audit_control ) Smilie

Code:
 
no = no_class 
fr = file_read
fw = file_write
fa = file_attr_acc
fm = file_attr_mod
fc = file_creation
fd = file_deletion
dl = file_close
pc = process
nt = network
ip = ipc
na = non_attrib
ad = administrative
lo = login_logout
ap = application
io = ioctl
ex = exec
to = other
all = all

Regards
ygemici
This User Gave Thanks to ygemici For This Post:
tonijel
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. AIX

User auditing from AIX server

I am trying to find out the information of my local desktop when i use putty to login to an AIX server. This is what I do: 1. login to my PC 2. take a putty session to an AIX server Can i get information of my local desktop from the AIX server ? Is there a command available ? Thanks (8 Replies)
Discussion started by: Nagesh_1985
8 Replies

2. AIX

AIX auditing

In our customer place somebody removed and PV from the server. I want the information like which user removed this PV. Is there any way to get PV removal information. When did the PV removed from the server ? Whether AIX auding will help ? Where i can get these information ? Thank... (2 Replies)
Discussion started by: sunnybee
2 Replies

3. Solaris

Solaris user auditing

Hello, I was wondering when Solaris auditing is enabled, If it is possible to keep track of users that are allowed to sudo to root. In other words, I would like to know which user did what on my Solaris box. (assumig that user can "sudo su -" ) Thanks. (2 Replies)
Discussion started by: niyazi
2 Replies

4. Shell Programming and Scripting

Script for Oracle user activity auditing

Hi All, I need to put in place a UNIX shell script that calls three sql scripts & reports to the DBAs. I already have the three sql scripts in place & they perform the following database auditing actions: 1. actions.sql This script queries the DBA_AUDIT _TRAIL table to look for database user... (2 Replies)
Discussion started by: divroro12
2 Replies

5. UNIX for Advanced & Expert Users

Auditing

:)I need a little help. I have sent all of our logs to our log server, but I can't send the audit logs that are in /var/log/audit.log. Can someone give me some type of idea to transfer these logs. Thank You (2 Replies)
Discussion started by: aojmoj
2 Replies

6. Solaris

Solaris 9 Auditing

How do I setup audit to alert on write conditions for individual files? Thanks. (3 Replies)
Discussion started by: dxs
3 Replies

7. HP-UX

Auditing User's actions

Hi all I hope to find what i'm looking for in this forum as said in the topic i want to track user's actions on the system. i mean also the action of moving or removing files. I have an HP 9000 with HP UX 11i. the users log on the HP from a terminal window under WIndows XP Thx (3 Replies)
Discussion started by: Timberland
3 Replies

8. AIX

User Auditing

i want to audit user commands .. keep track of what commands each user has been giving .. can this be done by writing a script in engraving it in .profile of the user. or is there any other way of doing this ... rgds raj (2 Replies)
Discussion started by: rajesh_149
2 Replies

9. AIX

Auditing User administrator

Background: I a trying to audit user administration on a AIX box. I am trying to make sure that any changes made by the System administrator to the user accounts (Add users, changing their attributes or deleting users) are accompanied by authorization i.e. the system admin does not make any... (0 Replies)
Discussion started by: gladiator
0 Replies

10. UNIX for Advanced & Expert Users

Question about Auditing

I was just going thru the auditing script .. 2 questions pop in mind .. Why did they move S81volmgmt .. What is the logic behind not loading it .. 2) Why the purpose of the device allocate entries (2 Replies)
Discussion started by: DPAI
2 Replies
Login or Register to Ask a Question