I use the following in my .kshrc file...
if [[ $- = *i* ]]
then
print -s "# $(who am i |xargs) logging in $(date)"
trap 'print -s "# $(who am i |xargs) logging out $(date)"' EXIT
fi
Also I execute a perl script once an hour as root to see if any .sh_history files have changed...
What's the best way to monitor whether rsh/rcp commands are being used? I would like to verify no one is using them before I disable them in favor of ssh.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.