Maybe OT, but there is software to hook exec at the system library level and provide syslog auditing: https://github.com/renard/snoopylogger
-Jonathan Hankins On Thu, Sep 3, 2015 at 2:43 PM, Chet Ramey <chet.ra...@case.edu> wrote: > On 9/3/15 2:43 AM, Ondrej Oprala wrote: > > > We have recently had a customer request for this, and Steve Grubb > corrected > > the original patch for auditing. IIRC, aureport-2.4.2 should be able to > > handle the USER_TTY > > events now. With his permission, I'm attaching the new patch. > > Thanks for the update. > > Chet > -- > ``The lyf so short, the craft so long to lerne.'' - Chaucer > ``Ars longa, vita brevis'' - Hippocrates > Chet Ramey, ITS, CWRU c...@case.edu > http://cnswww.cns.cwru.edu/~chet/ > > -- ------------------------------------------------------------------------ Jonathan Hankins Homewood City Schools The simplest thought, like the concept of the number one, has an elaborate logical underpinning. - Carl Sagan jhank...@homewood.k12.al.us ------------------------------------------------------------------------ -- This e-mail is intended only for the recipient and may contain confidential or proprietary information. If you are not the intended recipient, the review, distribution, duplication or retention of this message and its attachments is prohibited. Please notify the sender of this error immediately by reply e-mail, and permanently delete this message and its attachments in any form in which they may have been preserved.
