Hi, There is a variable called HISTFILE and by default it will be assigned as /root/.bash_history You can change the variable value to something else so that u can store the entire commands history to that particular file. You can set HISTFILE variable name in /etc/profile. Hope this helps!! Regards, Krishnaprasad -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of oliver.fenker@xxxxxxxxxxxx Sent: Wednesday, April 25, 2007 12:13 PM To: redhat-list@xxxxxxxxxx Subject: Root shell with logging Hi all, due to security contraints I am looking for a shell that logs all commands that are invoked by the user, in particular if the user has become root. I found two (non-RedHat) approaches: sudosh and rootsh. Sudosh seems to be a pretty good tool, unfortunately it logs also passwords in clear-text format. Rootsh not only logs keystrokes but also all the output to syslogd and fills up our log files . So, both tools are not suitable for us. At the moment we just copy the .bash_history file if a user logs out. But this is not absolutely reliable. Are there any other approaches? Could someone please point me to a usable solution for this issue? Thanks, Oliver Fenker -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
