[SunHELP] trace root commands

Tue Nov 6 11:35:47 CST 2001

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C166E9.789AD270
Content-Type: text/plain

I don't believe it does.  However, you can use "script" and redirect it to a
file.  Script records ever key stroke and the output produced by each
command run.  Do man on "script".  The nice thing about "script" is it puts
a time stamp at the beginning and end of the file.  If you don't want users
to know you are recording what they are doing you can write a simple script
to tail the users history file every time the log in and redirect it to
another file.  I have done this in the past to see who was messing with a
server and what they were trying to do.

Dennis L. Lund

--Original post--
Hi all,

Is it possible to trace all root or user commands that have
been issued in a period of time ?

Does solaris keep track of this information other than history?

<html>
<body>
<font size="3" face="Times New Roman"><span style="mso-fareast-font-family: Times New Roman; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">
- - - - - - - Appended by Scientific-Atlanta, Inc. - - - - - - -
<span style="font-size:10.0pt;font-family:Times New Roman;
mso-fareast-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:
EN-US;mso-bidi-language:AR-SA"></span><font face="Times New Roman" size="3"><span style="mso-fareast-font-family:Times New Roman; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">This e-mail and any attachments may contain information which is confidential, proprietary, privileged or otherwise protected by law. The information is solely intended for the named addressee (or a person responsible for delivering it to the addressee). If you are not the intended recipient of this message, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete it from your computer.</span></font></p>
</body>
</html>

------_=_NextPart_001_01C166E9.789AD270
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3DUS-ASCII">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version 5.5.2654.45">
<TITLE>RE: [SunHELP] trace root commands</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>I don't believe it does.  However, you can use &quot=
;script" and redirect it to a file.  Script records ever key stro=
ke and the output produced by each command run.  Do man on "scrip=
t".  The nice thing about "script" is it puts a time st=
amp at the beginning and end of the file.  If you don't want users to =
know you are recording what they are doing you can write a simple script to=
 tail the users history file every time the log in and redirect it to anoth=
er file.  I have done this in the past to see who was messing with a s=
erver and what they were trying to do.</FONT></P>

<P><FONT SIZE=3D2>Dennis L. Lund</FONT>
</P>

<P><FONT SIZE=3D2>--Original post--</FONT>
<BR><FONT SIZE=3D2>Hi all,</FONT>
</P>

<P><FONT SIZE=3D2>Is it possible to trace all root or user commands that ha=
ve</FONT>
<BR><FONT SIZE=3D2>been issued in a period of time ?</FONT>
</P>

<P><FONT SIZE=3D2>Does solaris keep track of this information other than hi=
story?</FONT>
</P>

<CODE><FONT SIZE=3D3><BR>
<BR>
<html><BR>
<body><BR>
<font size=3D"3" face=3D"Times New Roman"><span style=3D"mso-fareast-font-f=
amily: Times New Roman; mso-ansi-language: EN-US; mso-fareast-language: EN-=
US; mso-bidi-language: AR-SA"><BR>
- - - - - - - Appended by Scientific-Atlanta, Inc. - - - - - - -<BR>
<span style=3D"font-size:10.0pt;font-family:Times New Roman;<BR>
mso-fareast-font-family:"Times New Roman";mso-ansi-language:EN-US=
;mso-fareast-language:<BR>
EN-US;mso-bidi-language:AR-SA"></span><font face=3D"Times New Roman" size=
=3D"3"><span style=3D"mso-fareast-font-family:Times New Roman; mso-ansi-lan=
guage: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">This e=
-mail and any attachments may contain information which is confidential, pr=
oprietary, privileged or otherwise protected by law. The information is sol=
ely intended for the named addressee (or a person responsible for deliverin=
g it to the addressee). If you are not the intended recipient of this messa=
ge, you are not authorized to read, print, retain, copy or disseminate this=
 message or any part of it. If you have received this e-mail in error, plea=
se notify the sender immediately by return e-mail and delete it from your c=
omputer.</span></font></p><BR>
</body><BR>
</html><BR>
</FONT></CODE></BODY>
</HTML>
------_=_NextPart_001_01C166E9.789AD270--