This topic has been archived. It cannot be replied.
-
工作学习 / 专业技术讨论 / 请教UNIX admin专家，想知道用户在系统里都作过什么操作，通常这样的记录放在哪里呢，不是指哪个application的log,而是记录执行过的任何命令的记录(包括ls,more,ps这样的简单操作)。
-wisee(julywind);
2006-6-19
(#3035684@0)
-
history?
-iwantcar(流浪的EnjoyStudying);
2006-6-19
(#3035706@0)
-
Thanks but for the things happened long time ago, then history may not work. Usually in a production environment, what is the way the UNIX Admin uses for record the total history? Is it through a script?
-wisee(julywind);
2006-6-19
(#3035719@0)
-
在/etc/security/audit_control中设上相应审计标记,启动C2 Audit,在/var/audit中有log file产生,用praudit看.
-aloha2u(工夫茶);
2006-6-19
(#3035712@0)
-
Thanks.
-wisee(julywind);
2006-6-19
(#3035726@0)
-
新注册的MJ呀，是不是想查一下这两天肉乐为啥出问题？？？有谁在搞搞震？
-j30(猪狗不如);
2006-6-19
(#3035753@0)