LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-30-2008, 01:19 AM   #1
cizzi
Member
 
Registered: Jun 2001
Distribution: Gentoo
Posts: 153

Rep: Reputation: 19
How to see what my users are doing?


I'm in need of a real-time utility that would allow me to see what my users are typing as commands as a random security check on my system. Something like the whowatch command but that would have realtime commands if such a thing exists.. Thanks for any recommendations.
 
Old 01-30-2008, 03:42 AM   #2
doc.nice
Member
 
Registered: Oct 2004
Location: Germany
Distribution: Debian
Posts: 274

Rep: Reputation: 34
there is a way for root to real-time watch the console output (hint: look at the terminal-device used)
 
Old 01-30-2008, 03:54 AM   #3
b0uncer
LQ Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
You could also tail their shell histories, if their shells support that, but it has it's drawbacks of course. And note that even if you do track "command line activity", it doesn't cover the whole thing - notaby graphical user interfaces. Tracking open files (lsof) is one thing too, but might be pretty messy.

Another thing is then if you should be "watching" them. If your system is so badly secured that a regular user can break it in no time, you shouldn't be using it and if your system could take it, you wouldn't need to sit there every second - at least if you trust your users, and you should, because I don't understand why you would allow somebody to have a user account who can't be trusted at all.

My point is, your system's security cannot and should not rely on "peek-watching". If it does, you've already lost half the game. Stores need real-time video surveillance, but just because they don't trust their customers, and because they're more or less forced to keep their goods at hand. In computer systems things can be arranged differently, and they should.

Last edited by b0uncer; 01-30-2008 at 03:55 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to sort regular users and system users from /etc/passwd joeyBig Red Hat 9 05-29-2008 01:59 AM
Struggling to setup a Debian/etch desktop: LDAP users and LOCAL users jferrando Linux - Networking 1 05-05-2006 04:44 PM
how to authenticate external users but bypass prompt on local LAN users? taiwf Linux - Security 5 07-13-2005 10:01 AM
How to set a Gnome theme as default for all users and future users ? MDesigner Linux - Newbie 1 06-28-2004 12:12 PM
copying kde configuration for 2 users OR 2 users on 1 x session for vnc blackphiber Linux - General 0 02-26-2004 09:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 09:33 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration