How to keep a detailed audit trail
Intrusions can take place from both authorized and unauthorized users. My personal experience shows that unhappy user can damage the system, especially if they have a shell access. Some users are little smart and removes history file (such as ~/.bash_history) but you can monitor all user executed commands.
This article shows how to log user activity using process accounting. It allows you to view every command executed by a user including CPU and memory time. You can easily find out which commands used to take down your system with these utilities.
(Submitted by nixCraft Tue Nov 14, 2006 )
Our content can be syndicated: Main page Mac Page
Copyright 1999-2005 Noel Davis. Noel also runs web sites about sailing and kayaking.
All trademarks are the property of their owners.
All articles are owned by their author