[TriLUG] Logging root and DBA activities

[William Sutton]

one of my co-workers is using auditd.  He's got it configured to the point 
where you can actually replay someone's session.  I've bcc'd him in case 
he feels like shedding light on the subject.

William Sutton

On Mon, 2 Jun 2014, Matt Pusateri wrote:

> All,
>
> For compliance purposes, I need to log all actions as root or from our DBA’s.  We installed rootsh[1], but it leaves a lot to be desired.  I found Snoopy[2] but haven’t played with it yet, but it’s a little different than rootsh.  Anyone been using something different?  I’m not opposed to a commercial application within reason.  I need to be able to log to a central syslog server, so if it logs to syslog already that would be good.
>
>
> 1. http://sourceforge.net/projects/rootsh/  yeah the website is dead, I found it elsewhere can’t remember the link.  We used it out of EPEL on our Centos boxes.
> 2. https://github.com/a2o/snoopy
>
>
> Thanks,
>
> Matt P.
> -- 
> This message was sent to: William <william at trilug.org>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web	: http://www.trilug.org/mailman/options/trilug/william%40trilug.org
> Welcome to TriLUG: http://trilug.org/welcome
>