I am working on a program lets say programX which must run when the computer is not in use. I want to develop a monitoring program to monitor if there is user activity on the system so that it can stop the programX from running when the user is using the system and start programX when there is no user activity. Is there a way to determine this in linux?
View 4 Replies
I need to produce a script that will create a report that will be emailed to me that will Log user login activity to detect unauthorized remote access attempts. Where would I start?
View 2 Replies View RelatedI have a Centos router and I want a tool that can give me reports accessible from a browser about the users web activity. I need two type of daily reports:- list of web pages accessed by each local host- list of all web pages accessed by all local hosts and lit of local hosts that accessed one specific web pageI tried ntop and is not really suitable for what I need. Maybe it can do what I need, but I have to make several improvisations.
View 5 Replies View RelatedI can start/stop it with origami, but I need to know how to run the start/stop commands when the user becomes idle or active.Or, if I can tell if any user logged in with KDM (since I don't want ssh to stop f@h) is active from a script, I can write one that will do all I need.I can edit sudoers if the commands have to be run as the user. There's only one user I'm worried about making happy (it's the one everyone in the family shares)
View 3 Replies View RelatedI wonder if there is any chance to read the last time when the actually logged user have changed the mouse cursor and stroke the key.
View 3 Replies View RelatedIs there any way to view the any user activity/ commands history and date, time in the system? I look at the /var/log/secure but I can find only the login/ logout attempts and "history" command doesn't come with date/time that the user issue the commands. Any there any best practice to audit the user activities inside the system?
View 9 Replies View RelatedWhat is the difference between creating a "regular" user and creating a "system" user on Linux?
For example:
Code:
adduser john
Code:
adduser --system john
Similarly it seems there are normal groups and system groups. Doing an internet search and reading man pages does not give much information on the whole concept of system and regular user/group.
I have Karmic installed on three different computers (work, home and laptop), but on my home desktop there is a strange performance problem. During disk activity it sometimes becomes completely unresponsive. The mouse cursor doesn't even move. It actually seems fine when it first boots up, but it gradually gets worse as I use the computer for a while until it eventually becomes completely unusable. I'm only having trouble on the one system.The drive in the system is SATA, and I already checked to make sure DMA was on. It is a x86_64 kernel.I tried adding noapic to the kernel boot line after some googling, but it seemed to have no effect
View 4 Replies View RelatedMy system started running at 75 % CPU (its normally 20%), so I opened a terminal and looked at 'top', there are many processes running as root, the one thats sucking the CPU is this:'user'- root, 'pid'-2963, 'command'-X. below that there are a few processes of my user account, then alot more 'root' processes.
View 2 Replies View RelatedSystem activity monitoring tools - top, iotop, ntop, sar, collectl, etc - may be a good reference to judge the system activity when the system transitions to sleep state.But if I make the system transition to sleep state when i/o activity is zero during 15 minutes, for example, it won't sleep forever because slight i/o by daemons, etc occurs continuously even if no user i/o.So how can I judge the system activity to change the state by using those tools?
View 4 Replies View RelatedI have an auditing problem. I am required to be able to track user account modifications (creates, deletes, password changes, etc.) My team and I implemented auditd 1.7.17 and borrowed an existing rule set from /usr/share/doc/audit-1.7.17/nispom.rules. What we're seeing is that user account activity from the command line is retrievable by doing an 'aureport -m'. However, doing the same through the GUI, 'aureport -m' does not display the activity. So I have two questions:1. Is there another location I should be looking to find the user creation activities when using the GUI?2. Is there a way to make the activity using the GUI be captured in /var/log/audit/audit.log so 'aureport -m' can report it?Someone suggested a PAM configuration change, but was not able to tell me what change to make.
View 3 Replies View RelatedI keep noticing disk activity every roughly 1 to 3 seconds even though there is "nothing" going on. Of course, I run a number of "system" and "user" application packages - Apache2, MySQL, Browsers (Opera, IceWeasel), an SMB client and server, OpenOffice 3.0RC8 being the most prominent ones. I wonder what might be the cause for this constant disk activity which happens even when none of the applications do any noticeable work at all. Is there a way to determine the process that does those disk read/writes?
View 6 Replies View RelatedJust after I boot up I get this wierd HDD activity that lasts for some time during which my system runs at snail Pace and or Hangs. After a while the activity stops and things are good and then randomly it all starts again. I have read some forum post on constant HDD activity but they do not seem to apply to my problem. I am Running 11.3 with a quad core AMD 64bit CPU and 4GB of memory.
View 9 Replies View RelatedI'm running Slackware 13 with a custom kernel based off of 2.6.32.3. I tend to leave my system on 24/7, as well as my web browser. Originally it was Firefox and now it is Google's Chrome. Usually about a day of leaving the web browser open my HD activity spikes so high that I can barely do anything on the system until I kill the web browser. This has been happening with both Firefox AND Chrome! As soon as the browser processes are killed, the system returns back to normal.
View 10 Replies View RelatedHow to find, what are the files (system & user) created after login to the system in RHEL 5.0?
Any single command available?
I often get responses from people who first say: "Are you sure? You want your network to be exposed to the outside world?" I am not experimenting on a Production Server of NASA or any Security Concern Department. Friends, there is no harm in experimenting on your personal computer or on a test computer which is isolated from the production environment. Look at hackers! What do they do? If they don't know how security is breached then how would they come up with security measures?
If my question reads... "How to let any user perform Administrative Tasks on a Linux System irrespective of his/her privileges on that particular system?" then I would not get the right answers in the first place. They will say... "You are letting everyone destroy your system... are you sure you want to do that?" My question is: Why should we restrict ourselves from experimenting even if it sounds weird to other people?
I give you an example where it is desirable to let an unprivileged user perform certain tasks. You want to know if there are any employees in your office who are storing videos in their home directory and filling up the disk space to a great amount. You have a department called "Command Center or Data Center Operations or Help Desk" call it whatever you would, whose work is to monitor such activities, and you create an account "monitor" for them to monitor such activities but they are not able to do them:
[Code]..
I tried to do a scheduled software update several times today (8/20/11) and nothing seems to download, though I do get the "Downloading" PackageKit dialog message (the System Monitor shows practically no network activity). In between tries I downloaded some 600 MB .iso files (about 10 minutes each) so I know my internet is working properly. That leaves either PackageKit got hosed in my last update, or servers are down.
View 2 Replies View Relatedi want to know who created the user(this user was created 1yr ago).Is there any process or command to know who created the user and which date he was created
View 1 Replies View RelatedIn my system , there are 800 users in it , can advise if I want to find the user(s) who do not have login to the sytem over 180 days ( in the past 180days ) , what is the best way ? thx
View 4 Replies View Relatedi have tried what user name and password i can think of but still no answer. i can get into root and was hoping that i could find it in there. But no luck so far
View 2 Replies View Relatedhow do i find the files made by a user on the hole disk?
View 8 Replies View Relatedhow to find the only particular user (usage) of memory information
View 6 Replies View RelatedI am a newbie to Jaunty, so please forgive my descrip. terminology. I am experiencing a great amount of grief with my Jaunty install. I can no longer get a login screen in Jaunty. When I try to boot normally for this install I get an unclean shutdown screen & it goes into the "checking drive" mode. I uninstalled some applications such as has to do with touchpad, remote desktop, xorg-driver-fglrx etc. I reinstalled xorg-driver-fglrx, which I later found out that I do not need. I have an AMD64 HP system with ATI graphics onboard.
I need to find out how to load graphic user interface in Jaunty. Some of the necessary files have been completely removed by me & I need to reload the repositories and update my current install.The partition is encrypted but I have been able to login with the username & password for THIS encrypted install using the "repair broken system" part of the GRUB screen.
How do I go into the terminal and load repositories, and maybe the kernel so I can do an update/upgrade? I do not know if upgrade is part of what I need to do I wanna keep my Jaunty install so I can access 50G of data that is on this install. I have made no backup of this data!!!
I am able to login to my install using my username & password after I get to the "#" prompt, (option "fix broken system" in GRUB) so I know login can be done under username of install. I just need to know what to TYPE into the terminal to restore the necessary files in the right place to make it run. (Is it called terminal at that point?)
i am investigating on solutions to trace a file deletion on a computer( Linux O/S).i also need to determine weither after a file deletion or download on a computer, the computer clock had not been modified. In case a file has been downloaded on a computer and then transferred to a removable device, i need to find out the file activity. i mean i should be able to tell that the file was downloaded and transferred to a device with possible specifications.
View 2 Replies View RelatedIs there a non-root shell command that can tell me if a user's account is disabled or not? note that there is a fine distinction between LOCKING and DISABLED:
LOCKING is where you prepend ! or * or !! to the password field of the /etc/passwd file. On Linux systems that shadow the passwords, this marker flag may be placed in /etc/shadow instead of /etc/passwd. Password locking can be done (at a shell prompt) via password -l username (as root) to lock the account of username, and the use of the option -u will unlock it.
DISABLING an account is done by setting the expiration time of the user account to some point in the past. This can be done with chage -E 0 username, which sets the expiration date to 0 days after the Unix epoch. Setting it to -1 will disable the use of the expiration date.
The effect of locking to to prevent the login process from using a supplied password to hash correctly against the saved hash (by virtue of the fact that the pre-pended marker character(s) are not valid output character(s) for the hash, thus no possible input can ever be used to generate a hash that would match it). The effect of disabling is to prevent any process from using an account because the expiration date of the account has already passed.For my situation, the use of locking is not sufficient because a user might still be able to login, e.g. using ssh authentication tokens, and processes under that user can still spawn other processes. Thus, we have accounts that are enabled or disabled, not just locked. We already know how to disable and enable the account - it requires root access and the use of chage, as shown above.To repeat my question: is there a shell command which can be run without root privileges which can output the status of this account expiration info for a given user? this is intended for use on a Red Hat Enterprise 5.4 system.The output is being returned to a java process which can then parse the output as needed, or make use of the return code.
I am currently struggling with one of my tasks.I was asked to find a way how to determine how much time an _already running_ process is spending in user and kernel space.E.G. <some tool> <pid>[Control] + [c]<pid> spent 12.1 seconds in user and 1.52 seconds in kernel space.Does something like this exist? Basically I guess I am looking for something similar to time, except that the process is already running.So..a) Is there a tool which fulfills this task?b) Is there a way to write your own software which does the job? Is it even possible to code something I am looking for?I recently found strace -c -p <pid>, but well, this is not exactly what I was looking for.
View 3 Replies View Relatedwhen loggin as a normal user and search for a file passwd under /etc. i get few errors with permission denied.how to ignore this permission denied errors.
csh hostname 109 % find . -name passwd
find: ./lvm/backup: Permission denied
find: ./lvm/archive: Permission denied
[code]....
i have auto login and a ultra simple admin password, so it wasn't hard for them to mess with stuff...so when i came home i see that they had gone into terminal and added something to my system. i cant recall what it was because as soon as i saw in the history "warning this will make permanent changes to your system do you want to proceed" and the falling yes i got up and started bitching out my roommate and when i was gone someone had closed terminal. i was wondering is there is a way to search my recent terminal activity to see what was done so i can then find out if i can fix what was done?. or is there another option i should look into?
View 5 Replies View RelatedI'm Pab, just like to know, How can I allow a new user to run specific software like sqlplus.
Scenario:
I have an oradb@database user where i can execute sqlplus /nolog command, but when i created a new user named allan@database the bash says....-bash:sqlplus: command not found.
I'm using Ubuntu 10.04 and i can't find inittab on my system? Where did it go? Has Ubuntu removed this file? How can i find out about runlevels now?
View 4 Replies View Related
