[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



<a  rel="nofollow" href="http://www.linux.org/apps/AppId_193.html";>http://www.linux.org/apps/AppId_193.html</a>

Sergio

Chris Ricker wrote:

&gt;On Tue, 23 Mar 2004, Jonathan Glass wrote:
&gt;
&gt;  
&gt;
&gt;&gt;I was thinking of logging their entire sessions.  We're doing some
&gt;&gt;performance benchmarking, and it would make collecting the results more
&gt;&gt;reliable than asking the researchers for them.  They tend to be a bit slow
&gt;&gt;in responding.  :)
&gt;&gt;
&gt;&gt;I'm also thinking about it from a security/audit standpoint.  My users are
&gt;&gt;all Windows/Samba users, so it would be nice to log any shell activity on
&gt;&gt;their accounts, since they should have very little reason to use a shell.
&gt;&gt;    
&gt;&gt;
&gt;
&gt;depending upon your needs, process accounting may be less cludgy for what 
&gt;you're wanting. Just a few caveats to remember if you consider it:
&gt;
&gt;1. it logs when the command exits, not when it starts (and if the command 
&gt;never exits, it never logs)
&gt;2. it logs commands run, but not arguments passed to them
&gt;3. someone running &quot;cp badcommand ~/bin/ls &amp;&amp; ~/bin/ls&quot; will show up as 
&gt;having executed
&gt;       cp
&gt;       ls
&gt;(ie, it's not bullet-proof)
&gt;
&gt;later,
&gt;chris
&gt;_______________________________________________
&gt;Ale mailing list
&gt;Ale at ale.org
&gt;<a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt;
&gt;  
&gt;

-- 
  ?v?          Sergio Chaves            ?v?
 /(_)\       www.turbocorp.com         /(_)\   
  ^ ^    Enhanced Solutions Computing   ^ ^
               770.532.2239 
            Linux User #221305
          
         




</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00823" href="msg00823.html">[ale] Script at Login Question</a></strong>
<ul><li><em>From:</em> jonathan.glass at ibb.gatech.edu (Jonathan Glass)</li></ul></li>
<li><strong><a name="00829" href="msg00829.html">[ale] Script at Login Question</a></strong>
<ul><li><em>From:</em> ups at tree.com (Stephan Uphoff)</li></ul></li>
<li><strong><a name="00832" href="msg00832.html">[ale] Script at Login Question</a></strong>
<ul><li><em>From:</em> jonathan.glass at ibb.gatech.edu (Jonathan Glass)</li></ul></li>
<li><strong><a name="00833" href="msg00833.html">[ale] Script at Login Question</a></strong>
<ul><li><em>From:</em> kaboom at gatech.edu (Chris Ricker)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00922.html">[ale] Networking problem.</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00924.html">[ale] Interesting Microsoft Article</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00906.html">[ale] Script at Login Question</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00851.html">[ale] Script at Login Question</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00923"><strong>Date</strong></a></li>
<li><a href="threads.html#00923"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>