pam can be configured to log every key a user presses via the audit daemon. This, however, is useless unless you ship logging off the box. Sent from my iPhone On Sep 22, 2010, at 10:36 AM, "przemolicc@xxxxxxxxx" <przemolicc@xxxxxxxxx> wrote: > Hi, > > we have user 'u1' which can do 'su - root'. > Is it possible to log all commands run by this user: > - during id=u1 > - after su to 'root' ? > > Regards > P. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ------------------------------------------------------ > Tanie mieszkania lub pokoje do wynajÃÂcia dla studentÄÅw! > http://linkint.pl/f27f9 > > -- > redhat-list mailing list > unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe > https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list