![](https://seccdn.libravatar.org/avatar/27baa448681c4a5c26d14d8f44fbe635.jpg?s=120&d=mm&r=g)
On Tue, 18 Mar 2003 12:42:07 +0100
"Ivan Gustin"
Hi,
How can I track user's shell command history even if he or she set HISTSIZE=0 in his or her .profile, the last shell startup script file? Even better, is there any way to set global history to track all users in just one file with format USERNAME TIMESTAMP COMMAND. I read all about Bash shell, it's history, shell invocation, startup files, but I didn't find solution for that.
I have some bad guys on some servers, and I want to be well informed what they are doing, because I already catch them doing very bad things. :-(
You could go to http://grsecurity.net and get their patches for the kernel. You can log everything they do, but the logging may bog down your server. -- use Perl; #powerful programmable prestidigitation