Re: Loggin shell command to syslog

[Alan Peery <peery io com>]

Alessandro Fiorenzi wrote:

> Hi, is there any option on bash to log on syslog all commands the user 
> execute?
>
> I have seen that if I use bash -r I get a restricted bash is there any 
> similar ? 

I've never seen anything like this.  

If you attempt to extend bash to do this logging, make sure to
1) keep an unchanged version around for root, particularly in single 
user mode
2) code carefully, and test what happens when syslog is down or the 
partition you're logging to fills up.

An alternate approach would be modify the system call exec() and its 
variants--this way you'd catch all the ways that programs get started, 
but you'd be changing a fundamental aspect of the system, one that is 
used in the very initial steps of system startup...

Alan
--
Alan Peery
peery io com