Date: Tue, 20 Mar 2001 02:41:33 -0600 From: Mike Meyer <mwm@mired.org> To: Lucas Bergman <lucas@slb.to> Cc: questions@freebsd.org Subject: Re: Log files - newbie Message-ID: <15031.6077.692934.103212@guru.mired.org> In-Reply-To: <53834348@toto.iv>
next in thread | previous in thread | raw e-mail | index | archive | help
Lucas Bergman <lucas@slb.to> types: > > If a user uses su and then uses some more commands before > > exiting,will those commands(after su and before exit)be logged as > > well? > > Your question seems to presuppose that every command any (non-root) > user executes is logged. This is not the case. In fact, the commands > your users execute are not logged without considerable effort on your > part. You could look at the history files their shells leave, but > there's no reason they couldn't kill those before logging out (or > never create them in the first place). You can enable logging of every process - and thus every command - with the simple act of adding "accounting_enable=YES" to /etc/rc.conf. This is really logging for accouting purposes, but it includes the command name, user and group id, and controlling tty (among other things). lastcomm(1) can be used to extract that information a number of ways. So the answer to Lucas's question is "yes", if you're logging user questions. <mike -- Mike Meyer <mwm@mired.org> http://www.mired.org/home/mwm/ Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15031.6077.692934.103212>