Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Apr 2002 10:45:06 -0500
From:      George Georgalis <george@galis.org>
To:        "Galella, Anthony" <anthony.galella@intel.com>
Cc:        "'Rob B'" <rbyrnes@ozemail.com.au>, freebsd-questions@FreeBSD.ORG
Subject:   Re: verbose logging of root?
Message-ID:  <20020404104506.E9116@trot.haven.dom>
In-Reply-To: <59F55CE047A6D51196360002A534A4AC3703E7@pysmsx102.py.intel.com>; from anthony.galella@intel.com on Thu, Apr 04, 2002 at 10:11:02AM -0500
References:  <59F55CE047A6D51196360002A534A4AC3703E7@pysmsx102.py.intel.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Apr 04, 2002 at 10:11:02AM -0500, Galella, Anthony wrote:
>Unfortunately sudo won't help in this situation. 
>There is a "backup" sysadmin here that has root access in case I am not
>available.
>He is learning, but I want to be able to track everything he does as root in
>order to know exactly what is happening on the system.
>Case in point: he chown'd and chmod'd a whole directory structure, causing
>loss of access for users. I found the problem, and fixed it, but if I could
>track what he did in the logs, I could be aware of these things before users
>are (hopefully):)
>
>
>Anthony J. Galella
>anthony.galella@intel.com


Haven't tried it, but why not echo $PWD, $$, and tail -n1 `history` to ~/root.log as part of a $PS1 variable?
(or equivalent for csh, I always use bash)

// George

-- 
GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
Security Services, Web, Mail,            mailto:george@galis.org 
File, Print, DB and DNS Servers.       http://www.galis.org/george 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020404104506.E9116>