monitoring

[acidbrain]

Hi there,
Is there any way to monitor a certain account on a server?
If i sign up for an account on a certain server (no root privileges, only an account which i can access via putty, ftp etc.), i should have my privacy, isn't it. Is there a way to monitor or somehow to see who accessed your accont, eg. a sysadmin, or the root owner ??

 

[thedaver]

the "lastlog" command reveals the last time someone logged in with an account, however that's a bit useless since you'd need to login to see when you last logged in.......

"root" can view your account any time in any way.



Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/

 

[marsd]

Accessed your account?
Your uid is worthless really to the root
user, so I am assuming you want a
way to track file accesses, know about
modifications to processes you own,etc?
One way that occurs to me is create an md5 checksum
of all your files on logout,use stat to create a
snapshot of all your files in the same way, use
lsof and/or fuser to catalogue processes in the
same way: (lsof -l +f -i | awk ' {if ($2 == myid) {print}}')
Once you are done with snapshotting your stuff and saving
it offsite. You can login next time and know pretty
certainly what has changed, even if you don't why

 

[acidbrain]

Hey,
thedaver, that's true, as root you control the whole stuff. As marsd said, you can protect your files from being modified and monitor who made what, but you can't see who took a lil` "snapshot" from your directory content, so to said you can't see who's taken a look to your files. Anyway, marsd, good thinkin` )
Cheers. I owe you men!