LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-09-2010, 01:46 AM   #1
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 92

Rep: Reputation: 15
Question How can I acomplish this ?


Hy everyone, I have a question about a kind of a logger for my debian.
I have a little project, where I'm teaching my collegs basics of the linux. so they will get a clean installed debian, with only ssh acces,
they must then do few basic things like aditing with vi, locating files etc...
what I want to do is to log all they do, so after they login to the system, everything they do, must be logged sothat I can see where they made mistakes, like for example what they typed, what they copied, what they uploaded or downloaded, etc... all handlings must be in a log.

anybody know how can I do this ?

thanks in advance...
 
Old 06-09-2010, 02:40 AM   #2
EricTRA
Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290
Hello,

Have a look at process accounting (pacct). I believe it'll do just what you need.

Kind regards,

Eric
 
Old 06-09-2010, 04:19 AM   #3
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 92

Original Poster
Rep: Reputation: 15
any other options ?
 
Old 06-09-2010, 04:25 AM   #4
EricTRA
Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290
Hi,

What you could do, if you feel reluctant to pacct, is write you own script to 'synchronize' the history files of the users. That way you'll have a copy of what they have done. Or you could install and configure Unison File Synchronizer to do the same thing for you. But then you'll have to learn about Unison. Either way you'll have to put in some time, either to install, learn or write.

If you have lots of time you can always browse the user's history files but if they clear them you're left with nothing.

The history files only reflect what commands they have run, not when they logged in, how long they stayed logged in, and so on. In my opinion pacct is the best choice for what you need.

Kind regards,

Eric

Last edited by EricTRA; 06-09-2010 at 04:27 AM.
 
Old 06-09-2010, 05:13 AM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,462
Blog Entries: 54

Rep: Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899
Quote:
Originally Posted by turalo View Post
what I want to do is to log all they do
/
Quote:
Originally Posted by EricTRA View Post
In my opinion pacct is the best choice for what you need.
Over the years we've seen quite a few "I want to log everything" questions asked and 'pacct' does not cut it. If you can handle having your opinion changed please search the LQ forum for posts about 'rootsh' or see just a few results:
http://www.linuxquestions.org/questi...4/#post3950747
http://www.linuxquestions.org/questi...tivity-801565/
http://www.linuxquestions.org/questi...1/#post3690455
http://www.linuxquestions.org/questi...3/#post3637958
http://www.linuxquestions.org/questi...9/#post3604944
http://www.linuxquestions.org/questi...7/#post2980353
http://www.linuxquestions.org/questi...1/#post2894989
http://www.linuxquestions.org/questi...3/#post2631551

HTH
 
1 members found this post helpful.
Old 06-09-2010, 05:26 AM   #6
EricTRA
Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290Reputation: 1290
Quote:
Originally Posted by unSpawn View Post
Hi unSpawn,

I'm always open for a change, even of my own opinion I'll have a look at those threads, thanks for the info.

Kind regards,

Eric
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT -5. The time now is 12:17 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration