From: Abramson, Stuart (SAbramson@Wabtec.com)
Date: Mon Aug 11 2003 - 12:01:13 EDT
Robert:
A. Here is how the normal login process works:
(This depends to some extent on whether you run CDE or not.)
all logins run /etc/profile (I'm not sure whether CDE runs /etc/profile
first or last.)
CDE runs .dtprofile first.
If last line of .dtprofile is set properly, CDE runs .profile, which may
call .kshrc.
B. If you want to trap user commands, or monitor them, put somewhere in
this sequence (probably in /etc/profile):
export HISTFILE=/tmp/.sh_history.$LOGNAME.$$
Then, you'll be able to see all user commands.
You could also "tee" the commands to some log file.
You must write a cronjob in root:crontab to clean old history files out of
/tmp.
Stuart
Stuart Abramson | Off: 412/825-1434 | Cell: 412/417-1567 | email:
sabramson@wabtec.com
-----Original Message-----
From: Binkley Robert - rbinkl [mailto:Robert.Binkley@acxiom.com]
Sent: Monday, August 11, 2003 11:42 AM
To: Hpux-Admin (E-mail)
Subject: [HPADM] Record keystrokes.
I was wondering is it possible to log every key stroke that a user inputs. I
have a user I believe keeps re files and he want admit to it. How to catch
him?
Acxiom
Robert Lee Binkley Jr.
301 Industrial Blvd, | Conway | AR 72033 | USA
Office:501-342-0626 Cell:501-517-2071
**********************************************************************
The information contained in this communication is
confidential, is intended only for the use of the recipient
named above, and may be legally privileged.
If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination,
distribution, or copying of this communication is strictly
prohibited.
If you have received this communication in error,
please re-send this communication to the sender and
delete the original message or any copy of it from your
computer system. Thank You.
***** CONFIDENTIALITY NOTE *****
The content contained in this e-mail transmission is legally privileged and confidential information intended only for the use of the individual or entity named herein. If the reader of this transmission is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this transmission is strictly prohibited.
--
---> Please post QUESTIONS and SUMMARIES only!! <---
To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
Name: hpux-admin@dutchworks.nl Owner: owner-hpux-admin@dutchworks.nl
Archives: ftp.dutchworks.nl:/pub/digests/hpux-admin (FTP, browse only)
http://www.dutchworks.nl/htbin/hpsysadmin (Web, browse & search)
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:32 EDT