i am working with linux security auditing project on my Servers.I want to find out all the commands executed by individual users.i think using last command,find out the login details.But how can find out the commands executed by each users on all logins except "history".?
$ execute_some_long_command <command is executing> <Accidently press middle button that inserts bunch of garbage (including, for example, `rm -Rf ~/*`) into console>
How to let execute_some_long_command finish, but not execute inserted things?
I want to get a of log all the commands executed by the root user with the following details :
incoming ip username (thru which su was executed) time and date all the commands executed as mentioned above.
Also if user has managed to login as root, he should not be able to disable / delete the above info. Can this info be collected at some other physical server ?
I've firewall machine customers connect on it then connect to one of another 3 machines as root through ssh key , is there any way to know which user connect to which machine and what command that he has executed without using script command ?
i have a linux server, the Operating system is SUZE 9 but i need to see all commands executed by any users connected on the server and the ip of the host in a log file.the history file does not contain all info that i need .please is there a way to write a script in order to save this problem .
I've setup dimdim (opensource, centos 5.3) and noticed yum & rpm commands fail when executed as root because it uses librpmio from openoffice3 instead of /usr/lib (I'm running from memory so I may have misstyped). But sudo doesn't have this problem.
How can root's search path be different, especially after I state /usr & /usr/lib at the top of /etc/ld.so.conf.
I am working on Ubuntu 9.10.Since last two days there is issue while working with Terminal.Whenever I type a command and press enter it doesnt do anything. command is not executed. I guess its in loop. when I press Ctrl+C then it comes out of loop. this happens with all commands and I am not sure what is the problem.I have reinstalled Terminal but it did not worked.
I'm running Ubuntu 10.04.2 LTS, but wanted to use Banshee instead of Rhythmbox. After running Code: sudo aptitude install banshee I wanted to bind my "Media" button on my keyboard to run banshee; unfortunately, it still wants to run rhythmbox. Where can I change the default command executed by these keyboard shortcuts? I can't seem to find them in gconf-editor under apps/metacity/* and googling has proved fruitless in finding where this configuration file is located.
Having recovered from busting my installation, feel urgent need to know what I did to set it up.So...would like to see all commands I ran in terminal window and store them (execute as script in future?)I can see prior commands using up arrow, is there a way of storing all of those commands in history?Also, any pointers to setting up sort of backup of the package installation setup?
If I interactively ssh to a remote host and enter commands, I can up-arrow through the command history.If a script ssh's to a remote host and calls a command, it does not get appended to the history.How can I configure ssh or sshd so that this happens? I'd like to be able to have those scripted commands available in the history file when I log back in interactively.
i have RHEL4. i m facing problem that all the previous command history is deleted when i restart the server or relogin the server. it is happening with all the users not with any one user.
I am using squid proxy server for sharing Internet in my internal network. I would like to know that how can I check the browsing history by individual users web surfing history by their IP addresses?
I know how to do it by editing umplayer.ini but I am setting it up for someone who is not inclined to edit configuration files. There should be an option in the GUI for erasing url history, but I can't find it.
is there a way to edit which commands require a sudo? or some programs, like the CPU frequency monitor on panel, requires a password to change. where would i start if i want to change this?
I have been using docky lately (its a great app!) and I am just wondering if there is some way I can make it show all windows in an expose-like format if multiple windows are open, just like the Unity launcher. Is there any way I can achieve this without switching to Unity?
recently I did some changes to my bashrc file the changes are as follows export JAVA_HOME=/usr/java/jre<version>/bin/ export PATH=$PATH:/usr/java/jre<version>/bin
I have a few small still images of around 300 bytes each that I created under Windows many years ago, I'd like to:
1) change the colour of some pixels on each and 2) make them the exact same size but I do not want to learn Gimp to do this since I have no other use for it.
Could someone show me the sequences of commands in Gimp GUI that will do the job?
I was looking at some Vim plugins, and I installed one called Abolish. The page from where I got it [URL] only says:
install details Extract in ~/.vim or ~vimfiles
So I extracted it in ~/.vim. Now, the issue is that, if I edit a file as root, I am able to use the commands; however, when I edit a file as a normal user, these commands won't work. So... could this be a permissions issue? Or should I copy the plugin in some other directory, maybe?
I went to rearrange the icons on my top gnome-panel today, as some of the notification icons are displayed to the right of the power menu, and whenever I right click on any gnome panel, I get two options only 'Help' and 'About Panels' the menu options for edit, move, remove etc. are gone.
I don't really know where to start with this, as I don�t think I have tried to edit the panel since a clean install, so don't know when it was last OK.
Breezy 5.10 (not upgradeable yet ) Am trying to delete one printer and install another. With existing printer before deletion
Code: ~# cat /etc/cups/printers.conf # Printer configuration file for CUPS v1.1.23 # Written by cupsd on Sun Feb 14 18:28:27 2010 <DefaultPrinter Photosmart>
[Code].....
and whatever I try by installing another printer (HP Deskjet 5550) on what used to be direct usb:/dev/usb/lp0 it succeeds but will not print. I guess because the printer URI doesn't match the serial number or usb://CB770A doesn't actually exist.
BTW I have never used a printer type CB770A! Installing the printer on other usb ports, lp1, lp2, etc., also fails to print.
Note that this Deskjet5550 works fine in Windoze and from Ubuntu 10.04 so it isn't a printer specific problem.
I have spent quite some time trying to find where the printer URIs are defined even using strace (which calls localhost so I lose trace) without success.
I installed Ubuntu in a dual-boot with Windows 7, and installed the bootloader (GRUB? However, I have some weird Windows XP Embedded entry! I also have a lot of different boot options for Ubuntu. All I want is my Windows 7 entry (picked up as Windows Vista) and my main Ubuntu entry. How can I edit the bootloader entries (remove some existing ones, not adding any) so I have only two on there?
I'm completely clueless when it comes to hex editting. I'd like to know if it's possible to hex edit a few Windows programs in order to remove the advertisements from them. I dual boot Windows for gaming and run some open source software in it as well..
I have a script scheduled to run with Crontab at 5am each weekday.The script is all good and executes manually (is just a simple stop/start of a service)I have reason to believe that it is not executing according to schedule.I am looking to see when a script was last executed.The script is executing accordingly (long story short, I forgot it was Tuesday). I would still like to know how to check a last-execution time.
How can I find out which script runs and automatically mounts any usb drive inserted? This script seems to be faulty because it fails on ext3 disks but functions fine on NTFS or HFS+ disks. If I can find out which script it is maybe someone can help me fix it?