From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2854 invoked from network); 27 Dec 2000 16:09:14 -0000 Received: from sunsite.dk (HELO sunsite.auc.dk) (130.225.51.30) by ns1.primenet.com.au with SMTP; 27 Dec 2000 16:09:14 -0000 Received: (qmail 25066 invoked by alias); 27 Dec 2000 16:09:03 -0000 Mailing-List: contact zsh-users-help@sunsite.auc.dk; run by ezmlm Precedence: bulk X-No-Archive: yes X-Seq: 3578 Received: (qmail 25058 invoked from network); 27 Dec 2000 16:09:02 -0000 Date: Wed, 27 Dec 2000 17:08:28 +0100 From: =?iso-8859-1?Q?Thomas_K=F6hler?= To: zsh-users@sunsite.auc.dk Subject: Re: HOW do i.. Message-ID: <20001227170828.A24300@picard.franken.de> Mail-Followup-To: =?iso-8859-1?Q?Thomas_K=F6hler?= , zsh-users@sunsite.auc.dk References: <000001c06fd7$1134f930$21c9ca95@mow.siemens.ru> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="FCuugMFkClbJLl1L" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from tmd@tmd.df.ru on Wed, Dec 27, 2000 at 11:01:36AM -0500 X-Operating-System: Linux picard 2.2.17 X-Editor: VIM - Vi IMproved 6.0p ALPHA http://www.vim.org/ X-IRC: tirc; Nick: jeanluc X-URL: http://jeanluc-picard.de/ --FCuugMFkClbJLl1L Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Dec 27, 2000 at 11:01:36AM -0500, Vlad wrote: >=20 > > I suspect, you want > >=20 > > - get log of all user activity > > - prevent user from modifying this log > >=20 > > This can't be done, sorry. To save history entries in a file, this file= should > > be user-writable. It does not matter, whom this file belongs to. Histor= y file > > is written (if at all) after every command. It means, user can edit it = at any > > time and remove any entries. This applies to any logging. >=20 > is there a way to simultaneously log user's activity under root?=20 You can always spy his tty. There's even tools for that out there, search freshmeat and such... CU, Thomas --=20 Thomas K=F6hler Email: jean-luc@picard.franken.de | LCARS - Linux <>< WWW: http://jeanluc-picard.de | for Computers IRC: jeanluc | on All Real PGP public key available from Homepage! | Starships --FCuugMFkClbJLl1L Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6ShP8TEYXWMJlHuYRAkg4AJ0ZJHsbrPrlEAOPcT1US4w7IZtcgwCghI6i E+L/lWx2ZiGB92XaJSB6jmI= =uV60 -----END PGP SIGNATURE----- --FCuugMFkClbJLl1L--