LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 05-31-2009, 08:06 AM   #1
camry
LQ Newbie
 
Registered: May 2008
Posts: 27

Rep: Reputation: 15
bash auditing


Hi dear friends
I have an RHEL5 installed and I gave all users on it rbash shell, Now I want to audit all commands that they did in there shell once they enter them, Can any guide me to the way
Thanks
 
Old 05-31-2009, 11:36 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,675
Blog Entries: 54

Rep: Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953Reputation: 2953
Check rootsh, a logging wrapper for shells?
 
Old 05-31-2009, 01:50 PM   #3
fpmurphy
Member
 
Registered: Jan 2009
Location: /dev/ph
Distribution: Fedora, Ubuntu, Redhat, Centos
Posts: 294

Rep: Reputation: 61
Look at FreshMeat' BASH for Audit for starters. There are also a number of other variants out there. Basicly what you need to do is make a small modificaton to the bash source code to log all user actions to either a known directory or a centralized logger.
 
Old 06-06-2012, 07:48 AM   #4
scheuref
LQ Newbie
 
Registered: Jun 2012
Posts: 3

Rep: Reputation: Disabled
lightweight method to audit your bash

I wrote a method to log all 'bash' commands/builtins into a text-file or a 'syslog' server without using a patch or a special executable tool.

It is very easy to deploy, as it is a simple shellscript that need to be called once at the initialization of the 'bash'.

see the method here: 'http://blog.pointsoftware.ch/index.p...ommand-logger/'

cheers
Francois Scheurer
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
I need an Auditing solution - Please Help AmdMhz Linux - Newbie 6 11-20-2008 01:52 PM
network auditing cynthia_thomas Linux - Networking 2 10-13-2006 07:07 AM
What is Auditing support? Beezer Linux - Newbie 2 08-03-2005 09:33 PM
Auditing Services dollaz Linux - General 1 02-17-2005 04:31 PM
Network Auditing.... againstms Linux - Software 0 11-22-2004 05:17 AM


All times are GMT -5. The time now is 02:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration