Linux user monitoring

[jammysammy]

is there any way to watch what a user is doing on your linux system?

 

[n0cmonkey]

Look over their shoulder

Look at this history file, look for a program called something like watch, and make sure you use tripwire.

 

[DaHitman]

strace their process?

 

[Buddha Bart]

pound 'w' and see what command they're running

bart

 

[cureless]

A few things, first, run:

watch w

this will tell you what they are up to.

More tricky, find the pid of their original shell,

Now you can do:

cat /proc/<pid>/environ | perl-5.6 -e 'while(<>) { s/\00/\n/g; print $_ . "\n"}'
To see their environment as well as
ls -l /proc/<pid> to see what their CWD is, etc.

I should do a script for this ...


cl