On Sat, Dec 24, 2005 at 12:16:39PM +0100, MK wrote:
> Hello
>
> I'm trying to log all command which are entered by users but till now still
> without success. I think I was close with "accton" and "lastcomm" commands
> but unfortunetaly it logs only commands without parameters, so for instance
> if I disable pf, "pfctl -d" I have in log only pfctl so there is now way,
> to figure out what exactly happened.
> I also modified syslog.conf to log all in debug mode but as I expected it
> didn't help. It seems that Google doesn't have any idea as well.
> Is there any solution for my needs?
A bit late to the party, but...
Why not use the accounting system? See accton(8), sa(8)...
Joachim
