On Sun, Jun 18, 2006 at 06:06:45PM -0700, Lawrence Horvath wrote:
> Date: Sun, 18 Jun 2006 18:06:45 -0700
> From: Lawrence Horvath <[EMAIL PROTECTED]>
> To: freebsd-questions@freebsd.org
> Subject: syslog all commands
> 
> Im looking for a way to syslog all commands run my a group of users, i
> was looking at the authpriv.debug but it doesn't log _every_ command,
> is there anyother way to syslog all the commands run by a user?
> 

Is process accounting good enough?  It'll record the name of the
commands run by all users, what terminal they were run from, how much
cpu time they used, and start and stop times.  

See the man pages for acct(5) and lastcomm(1).  It's turned on by
setting accounting_enable="YES" in /etc/rc.conf, and running
/etc/rc.d/accounting start

David
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to