Login or Register to Ask a Question and Join Our Community


UNIX for Advanced & Expert Users

How to recover .bash_history?

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users How to recover .bash_history?
# 1  
Old 06-27-2013
Code:
 rm -rf .bash_history

some one ran rm -rf .bash_history on my Linux server(SUSE),I can see this command being run in current history, but I want the OLD history as well,can I recover the old history back.
Last edited by Ankit Bansal; 07-01-2013 at 08:53 AM..
# 2  
Old 06-27-2013
Restore the file from backup.
# 3  
Old 06-27-2013
I dont have the backup unfortunately,its a newly installed system,
else would have done that.
moreover i want to see, what the other person did in the system that he had to delete the history.
# 4  
Old 06-27-2013
Unfortunately there is no "undelete" in linux. You can try and look into logfiles like messages, audit.log, etc. to find some traces of what has happend.
# 5  
Old 06-27-2013
hhmm.....yes i understand that...thanks a lot...
so there is no solution to this.....one thing can i do something so that it doesn't show rm -rf .bash_history in the current history.....
# 6  
Old 06-27-2013
First run the history command to get a list of lines in the history:

Code:
$ history
    1  ./t
    2  ksh93 -c ./t
    3  ksh93 ./t
    4  ksh93 -c ./t
    5  ls
    6  history

then delete the line in question (for example line 5):

Code:
history -d 5

# 7  
Old 06-27-2013
but then again....it will show history -d in next history command....
which could indicate someone tampered with history..
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

How to get the "history" command to show all that is in the .bash_history file?

I am using the bash shell. When I view my recent command history using the "history" command from the prompt, it only shows me the commands starting at #928. The commands I need are earlier than that, but I can't figure out how to make the other 927 display. They are in my .bash_history... (1 Reply)
Discussion started by: Twinklefingers
1 Replies

2. Solaris

Recover rm command

Consider a situation where in you have used rm command wrongly in a particular directory say rm -r * and we don't have any backup of those files which ever are deleted. NOTE: I'm not facing situation like this but wanted to know what all options are available for such a situation. is... (5 Replies)
Discussion started by: Gautham
5 Replies

3. Shell Programming and Scripting

Display .bash_history with timestamp using script

Hi would like to ask if there is anyway to display .bash_history with timestamp using shell script? i know that you should use history command with HISTTIMEFORMAT="%d/%m/%y %T " to display it in terminal but it does not work when i use it on shell script. It seem that you can't run history... (1 Reply)
Discussion started by: pikamon
1 Replies

4. UNIX for Dummies Questions & Answers

how to store time in .bash_history file

Hi - user commands are written in . bash_history of that user when he logs out. my bash_history file shows. not sure what that number means #1329618972 ls -la #1329618978 ls #1329618980 ls -la my bash_profile looks like this PATH=$PATH:$HOME/bin export PATH export... (3 Replies)
Discussion started by: oraclermanpt
3 Replies

5. UNIX for Advanced & Expert Users

.bash_history modification

Hi Experts, I know my question would be strange but i need to understand how the .bash_history file is logging user actions (the mechanism) and if possible modify it to include also the date/time of every action done by the user. Sample file: # more .bash_history ssh <IP address> -l axadmin... (3 Replies)
Discussion started by: Dendany83
3 Replies

6. Shell Programming and Scripting

.bash_history

Dear All, I am creating users on our servers. the .bash_history supposed to store all the commands entered by the user. My question is, how can I prevent the user himself from editing or viewing this file? I have tried chaning the owner of the .bash_history to be the root user but... (5 Replies)
Discussion started by: charbel.n.s
5 Replies

7. Solaris

recover after delete using rm -rf

Dears, hi all i write this command rm -rf /export/home/john this there any command make me able to restore this folder again (5 Replies)
Discussion started by: jenovaux
5 Replies

8. UNIX for Advanced & Expert Users

.bash_history

During the course of the session before I logout I see some of the commands listed from my previous session but not from my current session and after I logout and log back in I see the commands which I ran before logging out. Does the .bash_history stay in the buffer or someplace else then? ... (2 Replies)
Discussion started by: jacki
2 Replies

9. UNIX for Dummies Questions & Answers

Change .bash_history to another one

we need the help to change .bash_histroy file in root ,(i.e) we want to save the histroy for .temp.txt for permenently. how to do?? Help us (1 Reply)
Discussion started by: thakshina
1 Replies

10. UNIX for Advanced & Expert Users

.bash_history

Question for all sysadmins. How do you keep track of what commands each user uses on his account. I thought an easy way is to monitor .bash_history, however those files can be "edited" by the user. Is there a permission combination that will allow the shell to record to it but yet they can't edit... (12 Replies)
Discussion started by: jason6792
12 Replies
Login or Register to Ask a Question