On Mon, Mar 05, 2001 at 10:25:21AM +0100, Niklas Höglund wrote: > Hi! > I've heard that there is an kernelmodule that logs all commands executed > on a machine. Anyone know where to find it? > > Or maybe someone has some other idea, how to log all commands exec...?
There is a package "snoopy" that uses a preloaded shared library to log each "exec()" call before performing it. If it is not yet in Debian, you can get a package from deb-src http://www.punknews.org/debian ./ -Steve