I've written a small script that parses a user's history file and looks for keywords like "nmap" & "su" and then emails a list to root.

I'd like to have a daemon that watches for these keyword and then log them to a file (which could also be emailed to root).

I've downloaded daemon-0.5, which is used to daemonize processes. Now I'm wondering how I can setup a process to watch user input on the command line and then log them. Maybe append the last command used in their history, but if the user know that I'm logging their commands then they could point the .bash_history file to NULL. Is there another to get around this?

- robeb