On Friday 03 February 2006 14:09, David Kirk wrote: > Is it possible to see what commands a user is typing as they happen? I'd > "tail -f .bash_history", but it doesn't seem to update until the user logs > out. Where does it store it during the active session? > > I have given a vendor root access to one of my servers so they can fix a > database that I broke, and I want to see what he is doing (for educational > purposes rather than lack of trust).
Please excuse the double post, but here are another couple of options for completeness. http://ttyrpld.sourceforge.net/ - which involves a kernel compile http://freshmeat.net/projects/ttysnoop/ - which is in Debian Neither of which I have played with. hads -- When man discovered milk came from cows, what did he THINK he was doing?
