2010/1/19 Carlos Perez <[email protected]>: > Is it a shared system? if it is and the user is not root create a cron job > to do the copy of the file every x time.
I was thinking that as well but the history file isn't written to till the user logs out so if they clear it down all you'll ever get is an empty file. Robin > > On Tue, Jan 19, 2010 at 6:50 AM, Monkey Daemon > <[email protected]> wrote: >> >> Hi, >> >> I've just discovered a system on which one of our darling users has >> decided adding a script to his .bash_logout file that removes >> .bash_history on logout is a clever thing to do. >> >> Is there a way to take a copy of the .bash_history file before it is >> deleted? This user obviously has something to hide as far as I'm >> concerned, so I need to archive this file to present it as evidence. >> >> Thanks in advance, >> >> MWD. >> _______________________________________________ >> Pauldotcom mailing list >> [email protected] >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >> Main Web Site: http://pauldotcom.com > > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
