RE: How to log - commands and file access
"David Corlette" <[email protected]> Tue, 13 Nov 2007 17:01:01 -0500
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
There's also OpsWare, which is pretty heavy-duty. Haven't used it myself, but my understanding is that all system access is done through a portal that logs *everything*. >>> On Mon, Nov 12, 2007 at 6:37 PM, in message <[email protected]>, "Kurt Buff" <[email protected]> wrote: > Perhaps http://sourceforge.net/projects/sudosh/ ? > > -----Original Message----- > From: [email protected] > [mailto:[email protected]]On Behalf Of > [email protected] > Sent: Friday, November 09, 2007 00:26 > To: [email protected] > Subject: [logs] How to log - commands and file access > > > > Hello, > > I want to known for a customer, how to log automatically on UNIX and Linux > system : > - all commands executed (in BASH, ZSH & co ...). I know but the file > ~/.(ba)sh_history but I prefer a global file or through syslog. > - all file access by process and username in real-time (not static) or if it's > not possible, which process and username access to some files (or directory) > like /etc/shadow, /data/ ... > > Regards, > ---------------------------------------------------------------------- > David Bigot - Consultant sécurité > Apogée Communications - Groupe DEVOTEAM > 86, rue Anatole France > 92300 Levallois-Perret > téléphone: ()1.41.49.58.04 > email: [email protected]