Posted by: Anonymous
[ip: 10.0.1.166]
on February 11, 2008 04:15 PM
we heavily use rootsh (http://sourceforge.net/projects/rootsh). this tool when called as "sudo rootsh" gives a user a root shell, but logs every keystroke into a logfile and/or syslog. sometimes users scream so loud for more privileges (developers need to install their software for example), that we get the direct order from the management to grant them. with rootsh we can protocol their actions and can prove them guilty if they broke something and deny it.
root privileges plus logging of keystrokes
Posted by: Anonymous [ip: 10.0.1.166] on February 11, 2008 04:15 PM#