Re: [PLUG] .bash_history

[Antony P Joseph <antony@panathara.org>]

Hi
  There are many ways to implement the IPC mechanism to coordinate
between the auditor user and the monitored user using TCP sockets, UNIX
domain sockets, named pipes etc... Probably the easiest way is to use
the named pipe. You can create one named pipe per monitored user with
appropriate permission and ownership. The auditor user can read from the
named pipe and record somewhere using "cat". The "script" can write into
the named pipe.
With regards
Antony 
On Sat, 2007-09-01 at 01:45 -0400, Neill R wrote:
> Anyone out there know how to do what Anthony suggested, "wrap bash
> with a "script"
> 
> Thanks
> Neill
> 
> 
> 
> On 8/28/07, Antony P Joseph <antony@panathara.org> wrote:
>         wrap bash with "script". You can get everything a user does 
>         On Tue, 2007-08-28 at 11:48 -0400, Neill R wrote:
>         > Typically, when a user logs into a system, their keyboard
>         activity is
>         > recorded in .bash_history (if using bash)
>         >
>         > Is there a way I can record activity from a users shell but
>         have it 
>         > log to /root/session.txt for example.   The motive is
>         strictly for
>         > curiosity sake, but I can see a need for auditing user
>         activity in the
>         > future.
>         >
>         > Thanks in advance
>         >
>         ___________________________________________________________________________ 
>         > Philadelphia Linux Users Group
>         --        http://www.phillylinux.org
>         > Announcements -
>         http://lists.phillylinux.org/mailman/listinfo/plug-announce
>         > General Discussion  --
>         http://lists.phillylinux.org/mailman/listinfo/plug
>         
>         ___________________________________________________________________________ 
>         Philadelphia Linux Users Group
>         --        http://www.phillylinux.org
>         Announcements -
>         http://lists.phillylinux.org/mailman/listinfo/plug-announce
>         General Discussion  --
>         http://lists.phillylinux.org/mailman/listinfo/plug
> 
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug