Login or Register to Ask a Question and Join Our Community


UNIX for Dummies Questions & Answers

Track user

 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Track user
# 1  
Old 06-16-2010
Track user
Hi, i suddenly realized that a directory is deleted unfortunately there are many user have pervilages on this directory
is there a way to track the user who delete this directory
or atleast from now can i enable something so that i can track from now

I think there is way from /etc/syslog.config but not sure

can anyone suggest?

Enviroment :AIX 5L
# 2  
Old 06-16-2010
look:
Code:
(Im root here)
van12:/home/vbe $ chmod 1755 dir1
van12:/home/vbe $ exit #(Now I not root anymore...)
van12:/home/vbe $ cd dir1
van12:/home/vbe/dir1 $ ll
total 144
drwxr-xr-t    3 root     system          256 Jun 16 18:19 .
drwxr-xr-x   49 vbe      staff         69632 Jun 16 18:19 ..
drwxrwxr-x    2 vbe      syso            256 Jun 16 18:19 dir2
van12:/home/vbe/dir1 $ id 
uid=280(vbe) gid=2000(syso) groups=0(system),1(staff),2(bin),8(cron),9(printq),11(lp),60(o
per),160(sasdba),300(dba),310(sas),1055(apache),220(prod),510(controlm),519(mysql)
van12:/home/vbe/dir1 $ rmdir dir2
rmdir: 0653-609 Cannot remove dir2.
The file access permissions do not allow the specified action.
van12:/home/vbe/dir1 $

Last edited by vbe; 06-16-2010 at 01:32 PM.. Reason: typo
# 3  
Old 06-16-2010
syslog isn't going to help you here. Nor is auditing users .bash_history or other related files, since those are easily removed by the user, or can be set to not be written.

You're going to need to set up the audit subsystem. This can be complex, but there are many webpages and lots of documentation.

Check out Use auditing to track reads and writes in a file, for example.
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Track activity of a user

Hi All We have a job which writes files to a server at a particular time. The files will be created by a particular user ID Today, during the execution of the job, it created a file to the server and the file sat on the server for sometime, but was deleted immediately at the end of the... (4 Replies)
Discussion started by: sparks
4 Replies

2. UNIX for Dummies Questions & Answers

How to track user activity?

Hi All Please can you help me with the following issue: A certain vendor installed an application in which for a user to log in; the user must use a user created/predefined by the application. And because this application has more than one user its difficult to track who did what and when,... (6 Replies)
Discussion started by: fretagi
6 Replies

3. Homework & Coursework Questions

Track user log!

Use and complete the template provided. The entire template must be completed. If you don't, your post may be deleted! 1. The problem statement, all variables and given/known data: The task is to measure the density of users that are logged on system. The program should check that every 30... (7 Replies)
Discussion started by: petel1
7 Replies

4. AIX

Track deleted OS user accounts

Recently we've had a couple user accounts mysteriously disappear. Is there any way to track these accounts and determine who/how they were deleted? (2 Replies)
Discussion started by: Sk0glund
2 Replies

5. UNIX for Advanced & Expert Users

Track user commands

Hi, I have a unix server and I am concerned about the security on that server. I would like to be able to write a script that records all the commands that were typed at the command prompt before the user calls the 'history -c' command and deletes all the history. I was thinking about firing or... (7 Replies)
Discussion started by: mishkamima
7 Replies

6. AIX

Track user logoff in AIX 5.3

Hi Does anybody know if there is a way in AIX 5.3 to track how a user was logged off? For instance where the user typed exit, hit crtl D, shell process was killed, etc. I know of the last log entries but this just shows a users login time and duration. I also tried syslog but I only get login... (5 Replies)
Discussion started by: kimyo
5 Replies

7. Shell Programming and Scripting

keep track of every user

dear all , I m new to shell programming and I need your help. Actually i want to keep track of all the commands executed in a bash prompt of users , very much in same manner as it is displayed when we run "history" command. now the users are smart enough as they delete their history by... (6 Replies)
Discussion started by: xander
6 Replies

8. UNIX for Dummies Questions & Answers

Possible to track FTP user last login? Last and Finger don't track them.

Like the topic says, does anyone know if it is possible to check to see when an FTP only user has logged in? Because the shell is /bin/false and they are only using FTP to access the system doing a "finger" or "last" it says they have never logged in. Is there a way to see when ftp users log in... (1 Reply)
Discussion started by: LordJezo
1 Replies

9. UNIX for Advanced & Expert Users

Track user activity --pls help

hi I want to know how to save all the command used by all the used under a particular root with the time stamp in a file. Eg: User Name: UX10 Time: 10:56 Command: LS User Name: UX23 Time: 10:59 Command: MORE abc.txt -Anand (2 Replies)
Discussion started by: anandtharani
2 Replies

10. Programming

keep track of the last 10 commands the user typed

Can I do it like this? if (strcmp(argv, "history")==0) { argv = "10"; execvp(argc,argv); } actually, it doesn't work, How can I modify it? Thanks (17 Replies)
Discussion started by: zhshqzyc
17 Replies
Login or Register to Ask a Question