How to track all user entered commands in solaris sparc 5.8

[vasudev123]

Hi All,

Please guide me how to track or capture all the unix commands entered by the different users in Solaris machine.

Thanks in Advance.

Regards,
Vasu

 

[KenCunningham]

Hi Vasu. In ksh (say), you will usually have a .sh_history file in the home directory, which contains commands entered by users for a pre-defined number-of-commands. You could also maybe use script in the .profile to write to a file, but this of course can be circumvented by users who are aware that it's set. Neither of these will capture changes made using vi or another editor, but will give you an idea of what files are being edited.

 

[Salem]

The basic command is called lastcomm

--

 

[KenCunningham]

Interesting, I wasn't aware of that. It apparently needs accounting turned on and this of course can add to sys admin overheads.