Why not log your bash commands to syslog with logger and some /etc/bashrc trickery ?
I found this very useful when I was looking at doing this: http://blog.rootshell.be/2009/02/28/bash-history-to-syslog/ 2010/1/19 Monkey Daemon <[email protected]>: > I've just discovered a system on which one of our darling users has > decided adding a script to his .bash_logout file that removes > .bash_history on logout is a clever thing to do. > > Is there a way to take a copy of the .bash_history file before it is > deleted? This user obviously has something to hide as far as I'm > concerned, so I need to archive this file to present it as evidence. -- Matt Erasmus /* @z0nbi / http://www.zonbi.org */ _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
