LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-22-2005, 09:14 AM   #1
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Rep: Reputation: 19
Question Need help with logginn


Hy everybody, I'm looking for some script that logs every user, such as : IP, username, typed in commands, when loged in , when logged out,

I tryd the "script" command its good but its not logging any IP, or time, so I'm looking for something more powerfull,

pls help.


Thanks.

Last edited by turalo; 09-22-2005 at 09:26 AM.
 
Old 09-23-2005, 03:30 AM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928
The information about login, logout and from where comes
with the system - the command to get to that info is:

last

To see what they did: enable the history-file in their
profile, and look at the .history file.



Cheers,
Tink

P.S.: Are you sure that what you're doing is
ethical? I mean, there's no good reason to see
who did what unless you have to assume that
someone is trying to compromise the machine.
 
Old 09-23-2005, 04:21 AM   #3
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
Smile About the PS

I'm not asuming anything, I'm just learning, I heave a linux mashine suse 9.3 and anotherone 9.2 , and we are using it as a learn server, so we log in do things, and one of important things is security, so I'got that Iidea to heave all info about things that happen, to make it possible to repair the problem, when the problems will accure, so my Idea is to finde some script or to write a script that can put all of this commands together : "last" "script" and others that doe the same , to let only one script handle all of this, so next time when I'll look for something then I'll just opent that log wich was made by that script (wich I'm lookin for) and see all of the info in one plase separeted to each user, so no need to first see the "last" then go and see the History and so on .
 
Old 09-23-2005, 01:32 PM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928
Well .. in that case there's two choices: either you hope to
actually get lucky and find something that does this, or you
script it yourself ;)

Hint: bash 3.xx has a time-stamp feature for the history, thus
you can determine what was done at which time.

Hint2: I looked at your original (and slightly distinct) thread
where you discussed script with Matir: you could avoid
the problems with the second session by writing to a time-
stamped file (break it down to seconds, should catch most
simultaneous uses).

Hint3: screen, too, provides an option to create a session-log.
Read it's man page ;)


Cheers,
Tink
 
Old 09-23-2005, 06:59 PM   #5
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
Thanks

Aldow, I'dont think this will be the solution that I'm looking for, but anyway we are learning so I'm goint to try the thing that you said and see if I'll finde something
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:30 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration