tracking user action


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users tracking user action
# 8  
Old 03-07-2007
Quote:
Originally Posted by xitrum
Hi,

we are using solaris8. we have some files disappear. I would like to know how to track who and when the files was remove ???
thanks,
As ghostdog74 said, you should enable Solaris auditing (formerly known as BSM). The audit class you want to assign is fd, which stands for file deletions.

It will generate an audit trail for all file deletions on your system.

See this page for more information.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How can i TRAP a user Logout action?

When the temp user logs in i see his session as below. # who root pts/0 2017-08-18 08:32 (121.87.51.113) temp pts/1 2017-08-18 09:06 (121.87.51.113) root pts/2 2017-08-18 08:59 (121.87.51.113) When he logs out by either firing exit command or closing the... (3 Replies)
Discussion started by: mohtashims
3 Replies

2. HP-UX

Tracking what commands were executed after sudo to another user

All team members has sudo access to user "batch55". Need to track all the commands used by team members after sudo to "batch55". Using HP-UX and ksh shell in our environment. How can i acheive this? Thanks In Advance. (2 Replies)
Discussion started by: venkatababu
2 Replies

3. Shell Programming and Scripting

multiple action!

lets explain it easy by showing the initial file and desired file: I've a file such this that contains: initial_file: 31/12/2011 23:46:08 38.6762 43.689 14.16 Ml 3.1 ... (1 Reply)
Discussion started by: oreka18
1 Replies

4. Red Hat

Tracking Process to a particular

I've tried to see what I can find on my own but I'm coming up with goose eggs. Basically I was wondering if there was a way of querying the scheduler (or something similar) to track a process back to a particular CPU it's executing on at the time of the command. ps has a "cpu" output option but... (1 Reply)
Discussion started by: thmnetwork
1 Replies

5. UNIX for Dummies Questions & Answers

Tracking user access

Hi, An important file in my solaris server has been deleted. Is there any way that i can find out when was that file deleted and what user account was used to delete the file.. (1 Reply)
Discussion started by: saharookiedba
1 Replies

6. UNIX for Advanced & Expert Users

Tracking down the problem

Is there a way to track down what process is sending to a certain port? I have some thing pounding the network with requests to a multicast IP that doesn't exist. I have shut down all comms related processes and yet it is still there. Need a way to track the port or IP back to the process. Thanks... (3 Replies)
Discussion started by: mattmanuel
3 Replies

7. UNIX for Advanced & Expert Users

Tracking user

dear all, I'm facing problem that is i have noticed from few days back that some body is deleting and making changes in the file from developement server where i'm working(in unix) so i want to track that who is using the server, what performancr they are doing and each every thing which r... (5 Replies)
Discussion started by: panknil
5 Replies

8. UNIX for Advanced & Expert Users

Command Tracking

Hi, OS: Solaris9, SPARC Is there any way I can track the commands run by users from the shell prompt? Example: Somebody is deleting files from the system. Who it is is a mystery. That person obviously does not use bash prompt so there is no history. Is there anyway I can find out who... (5 Replies)
Discussion started by: mahatma
5 Replies

9. Shell Programming and Scripting

action command

Hi.. When i refered the script /etc/rc.sysinit... i found the "action commands" like But this is not working in my shells.. the following error is coming... Please anybody help Thanks in advance esham (5 Replies)
Discussion started by: esham
5 Replies
Login or Register to Ask a Question
CDPLAY(1)						      General Commands Manual							 CDPLAY(1)

NAME
cdplay - play audio compact disks SYNOPSIS
cdplay [ -a]|[-r] DESCRIPTION
Cdplay is an audio-cdplayer it can be used interactively or non-interactively. With no flags cdplay is used interactively. When used inter- actively cdplay can be either in non-playing or playing mode. In non-playing mode you can select tracks to be played. In playing mode cdplay shows the track-time, remaining track-time, total-time and remaining total-time. Cdplay assumes the drive to be at /dev/cd0. During non-playing mode the following commands are available: cursor-up/down browse through the track-list spacebar add track to the play-list backspace remove a track from the play-list s start playing the tracks in the play-list. When the play-list is empty start playing from the current position in the track-list until the end of the cd p play the track on the current position in the track-list r play all tracks in a random order (shuffle play) e exit cdplay During playing mode the following commands are available: s stop playing, return to non-playing mode spacebar pause/resume current track cursor-up/down skip to next/previous track OPTIONS
When one of these options is used cdplay does everything in the background. -a Play all tracks, cdplay tells the drive to play all tracks and then it immediately returns to the user -r Play all tracks in random order (shuffle play). Cdplay forks of a new process which starts up a track, during that track it sleeps. When the track is finished it wakes up to start the next track and goes to sleep again. The parent process immediately returns to the user. BUGS
Cdplay does not sense if a cd has changed, so don't switch cd's. If you want to play another cd you have to insert the new cd and start cdplay again. AUTHOR
Michel R. Prevenier (mrpreve@cs.vu.nl) CDPLAY(1)