tripwire ?
Did they clear out their history?
/home/user/.bash_history would seemingly be a pretty good place to
start. Also you could check out their username in /var/log, and see
all instances of what they might have done....
This is seemingly another vague question, any more information on what
you are looking for? If you want something going forward, you could
use $(script) for all users on the systems and have it right to an
rsync'ed folder for future review.....
~M
On Thu, Mar 3, 2011 at 10:05, Tapas Mishra <[email protected]
<mailto:[email protected]>> wrote:
Hi,
I wanted to know if on a server 2-3 people have SSH access and one of
the person does some changes and leaves the job.
Is there any tracking tool which can track what things were
installed or
what changes were made by team individuals at a later date.
--
http://mightydreams.blogspot.com
--
ubuntu-server mailing list
[email protected] <mailto:[email protected]>
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam
--
Miano, Steven M.
727.244.9990
<http://stevenmiano.com> <http://facebook.com/mianosm>
<http://twitter.com/mianosm>
--
The Wellcome Trust Sanger Institute is operated by Genome Research
Limited, a charity registered in England with number 1021457 and a
company registered in England with number 2742969, whose registered
office is 215 Euston Road, London, NW1 2BE.
--
ubuntu-server mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam
