Ricardo Toma wrote:
I want to log all his actions, moves, commands, etc. How can I do that?
Hints: If you have a kernel compiled with the 'BSD accounting' option, start accounting via '/etc/init.d/acct start'. But it's a PITA to find out what he's done from the protocol file acct generates... If he's using bash and is stupid enough to have a .bash_history in his home, set a (hard) link to that file and set his HISTFILESIZE environment variable to 5000 or higher. Take a look at the man page of script... If he logs in from console, a tty sniffer would be interesting :) If he's coming from outside, you may want to use 'tcpdump -s 0' or another fine sniffer to log all his activity. Anyway, I wouldn't let him play with my box for a long time... HTH GTi