Re: [ilugd] How to trace every activity in Linux box
Ashish Shukla [EMAIL PROTECTED] writes: [about logging a developer's activity] You probably need to write a wrapper script which starts script[1] with $SHELL set to user's actual shell. And then install this wrapper script as user's shell. script command is part of BSD, and is available in Linux under util-linux package. The script process will trace every line printed on user's terminal, except curses stuff That rules out seeing what edits the user has done, which seems to defeat the original purpose. Also, the user has (and apparently needs) root. So only if you trust the user is the wrapper idea a solution. Sudo, as suggest earlier, looks like the simplest way. Maybe combined with script and a special editor wrapper. But the original poster will have to examine the situation more closely to see if it is appropriate. PJ ___ ilugd mailinglist -- ilugd@lists.linux-delhi.org http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - September 28-29, 2007 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/ilugd@lists.linux-delhi.org/
Re: [ilugd] How to trace every activity in Linux box
On Tuesday 11 September 2007 10:33, PJ wrote: [snip] Sudo, as suggest earlier, looks like the simplest way. Maybe combined with script and a special editor wrapper. But the original poster will have to examine the situation more closely to see if it is appropriate. I'm still not convinced that you can give someone root without trusting them completely. If it were only a question of editing files, I'd say let them edit a local copy as normal user, check it into a CVS repository and then some task (automated or manual) could pull out from the CVS and put the file(s) into the proper place. Much better control and tracking. Or SVN, or whatever (before this thread degrades into a version control flamefest). Once you give someone root or sudo for any non-trivial task you are effectively giving them root for anything. Regards, -- Raju -- Raj Mathur[EMAIL PROTECTED] http://kandalaya.org/ Freedom in Technology Software || September 2007 || http://freed.in/ GPG: 78D4 FC67 367F 40E2 0DD5 0FEF C968 D0EF CC68 D17F PsyTrance Chill: http://schizoid.in/ || It is the mind that moves ___ ilugd mailinglist -- ilugd@lists.linux-delhi.org http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - September 28-29, 2007 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/ilugd@lists.linux-delhi.org/
[ilugd] How to trace every activity in Linux box
Hi, My scenario goes this way. I have a Linux box and every developer has the root password and I cannot take the password from them coz that's their requirementAnd what I need is some why by which I can trace every activity performed in that box with the client's IP who fired those commands. Thanks in advance. Gopal. Need a vacation? Get great deals to amazing places on Yahoo! Travel. http://travel.yahoo.com/ ___ ilugd mailinglist -- ilugd@lists.linux-delhi.org http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - September 28-29, 2007 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/ilugd@lists.linux-delhi.org/
