[Pauldotcom] Archiving History files
Matt Erasmus
mailinglistmatt at gmail.com
Tue Jan 19 13:56:35 UTC 2010
Why not log your bash commands to syslog with logger and some
/etc/bashrc trickery ?
I found this very useful when I was looking at doing this:
http://blog.rootshell.be/2009/02/28/bash-history-to-syslog/
2010/1/19 Monkey Daemon <monkeywebdaemon at googlemail.com>:
> I've just discovered a system on which one of our darling users has
> decided adding a script to his .bash_logout file that removes
> .bash_history on logout is a clever thing to do.
>
> Is there a way to take a copy of the .bash_history file before it is
> deleted? This user obviously has something to hide as far as I'm
> concerned, so I need to archive this file to present it as evidence.
--
Matt Erasmus
/* @z0nbi / http://www.zonbi.org */
More information about the Pauldotcom
mailing list