[olug] Sharing root priv, tracking what other root does

Steve Busby Steve at Busby.com
Thu Dec 11 03:20:26 UTC 2003


On Wednesday 10 December 2003 09:07 pm, netsaint at cox.net wrote:
> I’m looking for a way to track what another root user does on a sensitive
> Linux server that I have had exclusive control of.  Recently, I was
> strong-armed into giving root access to another. Prior to sharing control I
> made it very clear, “you break it and I kill you”!  When this new root user
> breaks it, and he/she/it will, I should be able to recover nicely using
> AMANDA. Perhaps my emphatic statement was enough, to date, he/she/it has
> not attempted to login as root.  ;-) Any of you admins have experience in
> anything?  If so, how did you remedy it?
>
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> http://lists.olug.org/mailman/listinfo/olug

Simply have syslog log everything to another "syslog" server which you 
control.

-- 
BuzB

Registered Linux User 216668 on
Registered Machine 189657 at
http://counter.li.org
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Register your Uptime at: http://uptimes.hostingwired.com

Current System Stats:
Linux 2.4.22-10mdk #1 Thu Sep 18 12:30:58 CEST 2003 i686
 21:19:00 up 1 day, 17:28,  1 user,  load average: 2.14, 2.56, 2.34



More information about the OLUG mailing list