Re: root group in solaris
Tonnerre Lombard <[email protected]> Mon, 25 Sep 2006 07:51:06 +0200
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Organization | SyGroup GmbH |
| Message-ID | <[email protected]> |
--=-7mfBT3v/MSYmZs0SCEKW Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Salut, On Thu, 2006-09-21 at 11:59 -0700, Keith Bucher wrote: > One option that I've used to log these commands is sudosh > (http://sourceforge.net/projects/sudosh/). It acts as a login shell, > but logs all commands/keystrokes and allows easy playback/review of > them for auditing. What if one of the commands is /bin/ksh? Or if the person in question runs sudo /bin/ksh? Tonnerre --=20 SyGroup GmbH Tonnerre Lombard Loesungen mit System Tel:+41 61 333 80 33 Roeschenzerstrasse 9 Fax:+41 61 383 14 67 4153 Reinach BL Web:www.sygroup.ch [email protected] --=-7mfBT3v/MSYmZs0SCEKW Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (NetBSD) iQIVAwUARRduSe1mMGan/TnWAQIqxg/+Of+0eOK+IVwbwOkh7+bHAmACzMMcBUCy b+82jkDatreIPXASzyXNbq5arPG7ji247DUTDgxuVITdAonnKzRprNySJfKIyOTM rEnVD/sYe/y8e7UK7+MjmCe3GG+kxY6FEfuzw5zn82LX+d3wXo/2TjbcVupHZwa2 IGnsxqQx+dxjnZE4iJpjULLuvwLD9Ecl0XcviLXTMp5iDjGASxKSv4mPe7mR1Z27 T4MTKbDDqlxd9P3nZEn+Bfa31jnLS2qhiOLUtWQly146+SUa8BGWre+BeAOg11+g wkwIftZ/rplT9lqg3R7KG3t9zrxUXoUDC3GoaxuFn2DoUBXvtJQVoesgLQFZrigk LcFQpabxNwSCMPWv8cZWqovIwjW3lLzf1cxYJAFjVqbhTehJQOYydG42g/r6/eQC aK9jd3JRokzc6Wl7LDUWLQDtf7IUExlG2ZHBexxSvkVZOzOGITspdzMbtq4PVbtu WnRIo9kifsEZ24Ya/DJUndbauCPrDSEqZzDY6UL4DFyQ85u3hQzFmJEpt/Q+j4MZ HI/QqNvgSmJu9oKbbV+9mIIspL6WHCO8EmzvNk0A4alaistRsI0O3Bs2ipkMpNb9 1Zqt9YzR02oxjc9nzwmH7uj31aGgPoBPUIjd1Oolc/TWBpOSpaAVtm+FVRag8xxv m535oPGjqXU= =naFL -----END PGP SIGNATURE----- --=-7mfBT3v/MSYmZs0SCEKW--