From owner-freebsd-security  Wed Jul 18  1: 5: 2 2001
Delivered-To: freebsd-security@freebsd.org
Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201])
	by hub.freebsd.org (Postfix) with ESMTP id 4D5C237B411
	for <freebsd-security@freebsd.org>; Wed, 18 Jul 2001 01:04:58 -0700 (PDT)
	(envelope-from sheldonh@starjuice.net)
Received: from sheldonh (helo=axl.seasidesoftware.co.za)
	by axl.seasidesoftware.co.za with local-esmtp (Exim 3.31 #1)
	id 15MmJT-0001RZ-00; Wed, 18 Jul 2001 10:04:07 +0200
From: Sheldon Hearn <sheldonh@starjuice.net>
To: Artur Meski <glash@freebsd.net.pl>
Cc: freebsd-security@freebsd.org
Subject: Re: Exec logging, FreeBSD Kernel Module. 
In-reply-to: Your message of "Tue, 17 Jul 2001 12:34:22 +0200."
             <20010717123422.A97994@rapid.black.pl> 
Date: Wed, 18 Jul 2001 10:04:07 +0200
Message-ID: <5552.995443447@axl.seasidesoftware.co.za>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org



On Tue, 17 Jul 2001 12:34:22 +0200, Artur Meski wrote:

> I'm looking for FreeBSD Kernel Module, which will log all executed commands 
> by users. Could somebody help me?

You're probably looking for Andrzej Bialecki's spy module:

    http://people.freebsd.org/~abial/

I haven't looked at it in a while, but it looked good when I wrote the
manual page. :-)

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message