Hi, Have a look at snoopy. It is a execve wrapper that prints out the commands run to syslog
James > -----Original Message----- > From: Mart Frauenlob [mailto:[EMAIL PROTECTED] > Sent: 21 June 2006 09:25 > To: debian-security@lists.debian.org > Subject: Re: Command history log for audit trail > > > > [EMAIL PROTECTED] wrote: > > > > I need to set up an audit trail for all commands run on machines. I > > know that the auth.log records who logs in and when, and that each > > user's .bash_history has a history of their commands. But is there some > > other way to create a log for all commands run on a system? > > > > i.e. http://ttyrpld.sourceforge.net/ > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]