[812] in linux-security and linux-alert archive
Re: [linux-security] suspicious users
daemon@ATHENA.MIT.EDU (Mario D. Santana)
Mon Jun 17 09:52:34 1996
Date: Thu, 13 Jun 1996 16:12:48 -0400 (EDT)
From: "Mario D. Santana" <santana@sparc209.physics.fsu.edu>
To: "Douglas F. Elznic" <delznic@axess.net>
cc: linux-security@tarsier.cv.nrao.edu
In-Reply-To: <2.2.32.19960608172137.00684290@ian.axess.net>
Sounds like you need to look into ttysnoops. I use it, it works.
ftp.inbe.net:/pub/staff/carl
Use ethically,
.dave
Douglas F. Elznic wrote:
> I am becoming suspicious of some users on my system. I am wondering what is
> the best way to watch what they do or have done.
> What have you (the members of list) done to "babysit" these users.