The easiest way won't necessarily work with everything on Solaris - and takes more than one tool. You will need to use sudo to log super user activity, but you have to force everyone to use sudo to become root. For other users, the easiest way is to have all users use ksh for their shell and have your default profile set up shell histories. But those history files will get pretty large unless you back them up and trim them daily. Also, amazingly enough, there are still a significant number of Solaris apps that require the awful bourne shell that Solaris still uses as a default shell, and won't work under ksh. And shell histories don't work under sh.
Another option is to deny users shell logins and force them to go in through webmin or some similar graphical tool. Neither clean nor pretty, but relatively easy. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Ian Masters Sent: Thursday, October 15, 2009 8:00 PM To: [email protected] Subject: [Solaris-Users] User command logging Hello I have some Solaris 10 boxes on which I need to log every command of every user from basic user up to root user. I'm not overly familiar with Solaris and I don't really have time to read 800 page manuals, looking for a needle in the haystack. It seems as though Sudo or Solaris' RBAC can not accomplish what I need. Does anyone have any idea how this can be achieved? Any suggestions gratefully received. Regards Ian _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users
