On Tue, Jul 29, 2008 at 11:44 AM, Daniel <[EMAIL PROTECTED]> wrote: > ps aux will show which processes is running with the parameters used. > acct will log which command was executed. I want a combination of the > two to show which command was executed with what parameters as well as > who ran it when and when it stopped. I need this for a Fedora box and > an Ubuntu box.
This will be difficult. The accounting subsystem doesn't log anything but the command names themselves. You will need to implement something a little more hackish to get that kind of logging. Here are some options you may want to investigate: * Force users to run commands which you want to log with sudo * Write a wrapper script that users call which logs it's params and calls the real command * SELinux may give you logging abilities * AppArmor may include some logging as well. --lonnie /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
