Monitor the shell activity of a user on your Unix system?
- by Joseph Turian
Trust, but verify.
Let's say I want to hire someone a sysadmin, and give them root access to my Unix system.
I want to disable X windows for them, only allow shell usage (through SSH, maybe), so that all operations they perform will be through the shell (not mouse operations).
I need a tool that will log to a remote server all commands they issue, as they issue them. So even if they install a back door and cover their tracks, that will be logged remotely.
How do I disable everything but shell access?
Is there a tool for instantaneously remotely logging commands as they are issued?