i am using package "acct" (lastcomm is part of this package). my question is, isn't "acct" package depends upon user's .bash_history ? or it is maintaining its own log?
yes i can see user can delete/edit their history file. is there anyway to record history permanently. a good solution for accounting. Thanks, On Mon, Oct 21, 2013 at 8:08 PM, Chris Davies <[email protected]> wrote: > Muhammad Yousuf Khan <[email protected]> wrote: > > :~$ echo $HISTFILE > > /home/ykhan/.bash_history > > > any idea where these history files are. > > actually i need to do some accounting for my users , what they are doing > > actually with time tag set to ON. > > These files are of limited value for accounting since the users can > simply edit them. Perhaps you should investigate the kernel's process > accounting subsystem (usermode tools are in package "acct): > > # lastcomm --strict-match --user dmaus --tty pts/4 | head -5 > tty dmaus pts/4 0.00 secs Mon Oct 21 16:05 > ls dmaus pts/4 0.00 secs Mon Oct 21 16:04 > bash F dmaus pts/4 0.00 secs Mon Oct 21 16:04 > dircolors dmaus pts/4 0.00 secs Mon Oct 21 16:04 > bash F dmaus pts/4 0.00 secs Mon Oct 21 16:04 > > Chris > > > -- > To UNSUBSCRIBE, email to [email protected] > with a subject of "unsubscribe". Trouble? Contact > [email protected] > Archive: http://lists.debian.org/[email protected] > >
