monitoring user activity
i'm administering a Mandrake 10.0 system and was wondering if anybody could recommend any tools to monitor user activity. in particular i would like to see if any of the users is trying to hack the system from the inside. so far i've been manually looking at /home/user/.bash_history and /var/log/auth.log files.
|
I would Just install a firewall & view the logs now and again, for attempts to connect to unauthorised services
|
All times are GMT -5. The time now is 11:20 AM. |