Mag Gam on 1 Sep 2007 22:25:02 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] shell script help...

  • From: "Mag Gam" <magawake@gmail.com>
  • To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
  • Subject: Re: [PLUG] shell script help...
  • Date: Sat, 1 Sep 2007 18:24:55 -0400
  • Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=RJ+5f1PR/9jJqpdCJJyX3QkJSUGr7R9QReLyMWL5jQo/8VmC8FlYv0yAyT7Dm7FRa/u6bqRPnIz/8J5HuUSt/1kAYBl8AYdalhO/syqmgz0jguwPNlUpu/l0sBesY+mpCiURgs0N0OKM90dhYArVMlNqIHLkFFrOulHRymsJCwQ=
  • Reply-to: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
  • Sender: plug-bounces@lists.phillylinux.org
Management want to see who does or tries to do anything malicious. They want to see users' shell activity.



On 9/1/07, K.S. Bhaskar < bhaskar@bhaskars.com> wrote:
On 9/1/07, Mag Gam < magawake@gmail.com> wrote:
> Would wrapping "script" do better user auditing? or are there any downsides
> for that?

[KSB] I still don't understand what you are trying to accomplish.  An
approach based on script can be used to keep tabs on honest and / or
unsophisticated users.  If you are protecting against or detecting
sophisticated users who may be trying to do something they don't want
you to know about, this approach is far short of what is needed.

What problem are you trying to solve?

Regards
-- Bhaskar
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug