Linux user activity log

erugwejera

New Member
Joined
Feb 6, 2020
Messages
1
Reaction score
0
Credits
0
Hi Team

I need assistance in getting command history in Centos for the user before and after su. The information that I need is basically what you get from bash_history but I need to see commands after the user switches to any other user on the system as well. I also need this information regardless of authentication used as there is either LDAP, AAA etc and not just PAM. The other problem is bash history can be easily deleted so I rather need something that cannot be deleted easily.
 


The bash shell stores the history of commands you've run in your user account's history file at~/. bash_history by default. For example, if your username is bob, you'll find this file at /home/bob/.



Here the google search:

Hope that helps.
 
  • Like
Reactions: Rob

Members online


Top