# RootPrompt.org   Nothing but Unix.[Home] [Features] [Programming] [Mac OS X] [Search]


 How to keep a detailed audit trail

Intrusions can take place from both authorized and unauthorized users. My personal experience shows that unhappy user can damage the system, especially if they have a shell access. Some users are little smart and removes history file (such as ~/.bash_history) but you can monitor all user executed commands.

This article shows how to log user activity using process accounting. It allows you to view every command executed by a user including CPU and memory time. You can easily find out which commands used to take down your system with these utilities.

 (Submitted by nixCraft Tue Nov 14, 2006 )

  


Our content can be syndicated: Main page Mac Page

Copyright 1999-2005 Noel Davis. Noel also runs web sites about sailing and kayaking.
All trademarks are the property of their owners.
All articles are owned by their author