> There is a patch for bash which makes bash logs everything > that is typed (I don't remember the url, search for bash+logging+patch). I have written a very basic patch for bash 2.05b which logs everything which would normally be written to your .bash_history file to a single remote file (No matter what a person does the master file is still written too). It is pretty rough and I used it only briefly in a honeypot exercise, though you may find it usefull. http://gearbox.gearbolt.net/files/patches/bash-masterhist.diff
Craig Holmes -- KMail: 1.5.2 Linux Weltall.gearbolt.net 2.4.20 #1 Thu Dec 26 20:59:30 EST 2002 i686 AMD Athlon(TM) XP 1800+ AuthenticAMD GNU/Linux