Logging a ssh-session
 

Hello everybody!

Is there any way to completely log a ssh-session?
So whta I want is to trace everything a user is doing.
But the user may not have the possibility to stop the logging or change the logfile or something like this. So a simply tee won't do the job.

The reason for that is, that I have to grant another company access to my server, but of course I want to know what they do.

Best regards

Hi,

I assume, reading your post, that you want to log it on the server side. This site has a way to do it but I've never tried it. I assume you could also use rootsh for what you need it. You could also enable bash history (if it's not) and limit the .bash_history file to append mode only so they cannot delete anything from it. That also would give you an idea of what they've done.

Kind regards,

Eric