|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] logging user activity
|
On Aug 13, 2009, at 4:58 PM, JP Vossen wrote:
>
> The only way you can *almost* guarantee capturing all user activity is
> to modify the kernel to do so.
>
Right, auditing is a kernel subsystem, which you can tune to make it
tell you anything that gets touched, run, created, by whom, and via
what command. Sure, it wont capture keystrokes, but I dont think very
many people are interested in seeing all of the ^H^H^H^H's from a
typical user. This all really depends on the use case.
~Paul
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|