Hi Nils,
Up at Linux Fest Northwest I saw a presentation by a guy who attacked this
problem with a couple of scripts. I believe the most simple one was something
to this effect but I only jotted it down and didn't actually test it:
function log
{
typeset x
x=$(history 1 | cut -f 5-)
logger -p daemon.notice -t "LOGINAME" $PWD "${x# }"
}
trap log DEBUG
The presenter's name was Gary Smith. I don't remember him being a security guy
as much as a ninja sys admin.
-geordy_______________________________________________
Pauldotcom mailing list
[email protected]
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com