user trace
Problem Description
=======================
how to trace the user activities such as changing files,deleting.can i created the log for that.
I have the user "appl" which has some env file for oracle apps .developer using same login. i would like to create username for each one.can i call same env for that users.
Answer
---------------------------------------
If you have audit RPM installed, check out the amazing level of detail you can get:
OEL5 (at least) has a system-config-audit tool that helps choose what to audit.
OEL4/RHEL4 lacks that GUI, so you must use the auditctl command-line tool. There are many examples in the "/usr/share/doc/audit-*/" directory. Look at the "examples.rules" and the "capp.rules" files for examples.
how to trace the user activities such as changing files,deleting.can i created the log for that.
I have the user "appl" which has some env file for oracle apps .developer using same login. i would like to create username for each one.can i call same env for that users.
Answer
---------------------------------------
If you have audit RPM installed, check out the amazing level of detail you can get:
$ man ausearch
OEL5 (at least) has a system-config-audit tool that helps choose what to audit.
OEL4/RHEL4 lacks that GUI, so you must use the auditctl command-line tool. There are many examples in the "/usr/share/doc/audit-*/" directory. Look at the "examples.rules" and the "capp.rules" files for examples.
0