LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-16-2010, 10:51 AM   #1
ajayan
Member
 
Registered: Dec 2007
Posts: 89

Rep: Reputation: 16
History of Commands Executed by Users


Hi all,
i am working with linux security auditing project on my Servers.I want to find out all the commands executed by individual users.i think using last command,find out the login details.But how can find out the commands executed by each users on all logins except "history".?
Thanks
Ajay
 
Old 04-16-2010, 11:16 AM   #2
omfgitsbk
LQ Newbie
 
Registered: Apr 2010
Distribution: rhel, fedora, ubuntu
Posts: 6

Rep: Reputation: 1
You could look at each of their .bash_history in their home directories.
 
1 members found this post helpful.
Old 04-16-2010, 12:38 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,361
Blog Entries: 55

Rep: Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547
...and note a users shell history may be emptied or edited. Also see 'lastcomm -u $LOGNAME', 'sa -u|grep $LOGNAME'.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Log all commands executed by any user? Possible helptonewbie Linux - Security 25 09-01-2009 09:34 AM
ssh record executed commands??? joangopan Linux - Newbie 4 05-13-2009 11:05 AM
How to Display Commands to be Executed with At lrt Linux - Software 1 04-11-2008 12:26 PM
at - warning: commands will be executed using /bin/s RGummi Linux - General 4 10-13-2006 01:34 PM
removing only most previously executed command from history? jagroop mand Linux - Newbie 2 01-19-2005 06:39 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 12:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration