Is it a shared system? if it is and the user is not root create a cron job to do the copy of the file every x time.
On Tue, Jan 19, 2010 at 6:50 AM, Monkey Daemon < [email protected]> wrote: > Hi, > > I've just discovered a system on which one of our darling users has > decided adding a script to his .bash_logout file that removes > .bash_history on logout is a clever thing to do. > > Is there a way to take a copy of the .bash_history file before it is > deleted? This user obviously has something to hide as far as I'm > concerned, so I need to archive this file to present it as evidence. > > Thanks in advance, > > MWD. > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
