RE: How to log - commands and file access

"David Corlette" <[email protected]> Tue, 13 Nov 2007 17:01:01 -0500
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
There's also OpsWare, which is pretty heavy-duty.  Haven't used it myself, but my understanding is that all system access is done through a portal that logs *everything*.

>>> On Mon, Nov 12, 2007 at  6:37 PM, in message
<[email protected]>, "Kurt Buff"
<[email protected]> wrote: 
> Perhaps http://sourceforge.net/projects/sudosh/ ?
> 
> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]]On Behalf Of 
> [email protected]
> Sent: Friday, November 09, 2007 00:26
> To: [email protected]
> Subject: [logs] How to log - commands and file access
> 
> 
> 
> Hello,
> 
> I want to known for a customer, how to log automatically on UNIX and Linux 
> system :
> - all commands executed (in BASH, ZSH & co ...). I know but the file 
> ~/.(ba)sh_history but I prefer a global file or through syslog.
> - all file access by process and username in real-time (not static) or if it's 
> not possible, which process and username access to some files (or directory) 
> like /etc/shadow, /data/ ...
> 
> Regards, 
> ----------------------------------------------------------------------
> David Bigot - Consultant sécurité
> Apogée Communications - Groupe DEVOTEAM
> 86, rue Anatole France
> 92300 Levallois-Perret
> téléphone: ()1.41.49.58.04
> email: [email protected]