hi
is ther any other place where i can find the bash history other than /.bash_history
i want to know wt the user had been doing on the shell......also want to know wt the use had ben doing in the gui (kde)??

You can't really log everything the user is doing in the GUI without patching KDE afaik! And if you do so it will be a HUGE performance decrease. Is it really worth the trouble ?

What are you trying to archive ?

if the used delets the commands from the bahs history file then how can i find out wt had benn he doing there... i mean the user is the member of the same root group and have all the rights
then if he delets the command from the .bash-history file then is there any other place where can i find out the logs

If a privileged user deletes commands or you expect it to happen, that means you've got a trust problem. If you can't trust this user to do a job w/o the need for you constantly checking, then deny the user access to privileged accounts. If that is not an option you can get some initial coverage (not everything and not for long), but since the user is in the root group circumvention is easy anyway once he/she finds out you've been logging.

So, maybe it would be good if you explained why you need this before we try to offer more detailed suggestions. Depending on decay (for instance disk I/O and time) you may be able to undelete snippets of .bash_history when not shredded or linked to /dev/null or something like that, but it's more like forensics stuff (slow, tedious and no guarantee of result).

i wana do is as we were confiruring the firwell at home we all were the amember of root group ..as i was root there. it was mis configured no trafic was comming and out.. and i tried to find out it in the .bash-history but commands there were not causing the problem..then i thought that may be some one had deleted the command as we will blame him that he had created problem ot us