Re: root group in solaris

Tonnerre Lombard <[email protected]> Mon, 25 Sep 2006 07:51:06 +0200
Newsgroups gmane.comp.security.sun
Organization SyGroup GmbH
Message-ID <[email protected]>
--=-7mfBT3v/MSYmZs0SCEKW
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Salut,

On Thu, 2006-09-21 at 11:59 -0700, Keith Bucher wrote:
> One option that I've used to log these commands is sudosh
> (http://sourceforge.net/projects/sudosh/).  It acts as a login shell,
> but logs all commands/keystrokes and allows easy playback/review of
> them for auditing.

What if one of the commands is /bin/ksh? Or if the person in question
runs sudo /bin/ksh?

				Tonnerre
--=20
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      [email protected]

--=-7mfBT3v/MSYmZs0SCEKW
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)

iQIVAwUARRduSe1mMGan/TnWAQIqxg/+Of+0eOK+IVwbwOkh7+bHAmACzMMcBUCy
b+82jkDatreIPXASzyXNbq5arPG7ji247DUTDgxuVITdAonnKzRprNySJfKIyOTM
rEnVD/sYe/y8e7UK7+MjmCe3GG+kxY6FEfuzw5zn82LX+d3wXo/2TjbcVupHZwa2
IGnsxqQx+dxjnZE4iJpjULLuvwLD9Ecl0XcviLXTMp5iDjGASxKSv4mPe7mR1Z27
T4MTKbDDqlxd9P3nZEn+Bfa31jnLS2qhiOLUtWQly146+SUa8BGWre+BeAOg11+g
wkwIftZ/rplT9lqg3R7KG3t9zrxUXoUDC3GoaxuFn2DoUBXvtJQVoesgLQFZrigk
LcFQpabxNwSCMPWv8cZWqovIwjW3lLzf1cxYJAFjVqbhTehJQOYydG42g/r6/eQC
aK9jd3JRokzc6Wl7LDUWLQDtf7IUExlG2ZHBexxSvkVZOzOGITspdzMbtq4PVbtu
WnRIo9kifsEZ24Ya/DJUndbauCPrDSEqZzDY6UL4DFyQ85u3hQzFmJEpt/Q+j4MZ
HI/QqNvgSmJu9oKbbV+9mIIspL6WHCO8EmzvNk0A4alaistRsI0O3Bs2ipkMpNb9
1Zqt9YzR02oxjc9nzwmH7uj31aGgPoBPUIjd1Oolc/TWBpOSpaAVtm+FVRag8xxv
m535oPGjqXU=
=naFL
-----END PGP SIGNATURE-----

--=-7mfBT3v/MSYmZs0SCEKW--