how to keep track of user activity?

[Cap2010]

hi,
How to keep track of users logging in as root or user
for the activity done on the system
Want to see user/root activity like what directory he has been,
command executed, file opened
with date and time
for security purpose, i have now to do this.
don't know how.

Regards,


Cap

 

[surya12]

you can use the following commands:

lastcomm <username> or

acctcom -u <username>

For more details, see the man pages of these commands.

surya12

 

[marrow]

The lastcomm and acctcom commands are commands I have never used before and could be very useful. However they do not appear to work on Solaris8 or 2.6. even after creating /var/adm/pacct....

I get nothing back

 

[trunix]

Have you switched accounting on with 'accton' ?
Remember that if you do switch accounting on, it can generate large log files.