I want to know if HISTIGNORE is active

khanthegeek · 12-29-2014, 03:12 AM

If we put space before any command on shell it will not recorded in History.
Any way to traack or know that command if user use spae before that command.
Please help me Out..

unSpawn · 12-29-2014, 05:04 AM

Enable auditing an unprivileged user can not subvert easily using the audit service (and possibly rootsh?)?

veerain · 12-29-2014, 09:22 PM

The gnu Accounting daemon acct can log every process run. You neeed BSD acoounting support in kernel. You can get acct from http://www.gnu.org

unSpawn · 12-30-2014, 03:18 AM

Quote:

Originally Posted by veerain

The gnu Accounting daemon acct can log every process run.

Yes it can but it's lack of detail means it's of no real use as part of an audit trail.

Quote:

Originally Posted by veerain

You can get acct from http://www.gnu.org

'acct' is part of most common Linux distributions.