22 Nov
2001
22 Nov
'01
17:09
Il 18:37, giovedì 22 novembre 2001, Boris Lorenz ha scritto:
Yup,
On 22-Nov-01 Lentila de Vultur wrote:
I have a user that after logging on to a machine is presented with a menu (a script called from .profile). I want to log every action that user performs and every output from the system. I tried with "script" command but I didn't succeeded. has anyone any idea?
use a keystroke sniffer (like ttysnoop, use google to find it), or maxty (available from securityfocus's tools section), which is a loadable kernel module. Both are nice to use. But it's a nasty thing to spy on local users unless you have a very good reason to do so... :p
What about if they login from remote? Should we sniff all network packets or there is a better choice? Praise