OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suse-security] Log/Audit all user commands

From: Ricardo Toma (rtomayahoo.com.ar)
Date: Tue May 27 2003 - 23:55:31 CDT

Hi, I am having a little problem I need to solve
quickly. I have one intruder (long to explain now)
which edited the passwd file and set his user with 0
id (as root). I don't want to block him. I want to log
all his actions, moves, commands, etc. How can I do
that?

Thanks in advance!

------------
Internet GRATIS es Yahoo! Conexión
4004-1010 desde Buenos Aires. Usuario: yahoo; contraseña: yahoo
Más ciudades: http://conexion.yahoo.com.ar

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here