OpenForum RSS: SSH

SSH (Andrey Mitrofanov)

Fri, 20 Jul 2018 07:44:45 GMT

>>> � �� /var/log/messages � � /var/log/syslog ��
>>> ��
>> � ��, ��ģ� �� _��_ ��.
> �� . �� .

�� , �� (�� _��_ �� ) -

https://duckduckgo.com/?q=bash+commands+to+syslog
=>
https://askubuntu.com/questions/93566/how-to-log-all-bash-commands-by-all-users-on-a-server
https://backdrift.org/logging-bash-history-to-syslog-using-traps
... ... ...

SSH (Andrey Mitrofanov)

Fri, 20 Jul 2018 07:41:43 GMT

>>> � �� /var/log/messages � � /var/log/syslog ��
>>> ��
>> � ��, ��ģ� �� _��_ ��.
> �� . �� .

+ ��, �� bash � ��
+ �� syslog
+ ��, �� (�� bash, ��).

[CODE]From 74652ad96aabd61908a6b76c37f551d5f9a00b6c Mon Sep 17 00:00:00 2001
From: Andrey Mitrofanov <>
Date: Tue, 7 Oct 2014 11:12:18 +0400
Subject: [PATCH] Define SYSLOG_HISTORY. * "Bash 4.1 is able to log the
history to syslog (only to be enabled at compile time in config-top.h)"

---
config-top.h | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config-top.h b/config-top.h
index 147d4f4..5265a05 100644
--- a/config-top.h
+++ b/config-top.h
@@ -101,7 +101,7 @@

/* Define if you want each line saved to the history list in bashhist.c:
bash_add_history() to be sent to syslog()

SSH (dias)

Fri, 20 Jul 2018 03:25:58 GMT

>> � �� /var/log/messages � � /var/log/syslog ��
>> ��
> � ��, ��ģ� �� _��_ ��.

�� . �� .

SSH (Andrey Mitrofanov)

Thu, 19 Jul 2018 12:19:59 GMT

> � �� /var/log/messages � � /var/log/syslog ��
> ��

� ��, ��ģ� �� _��_ ��.

SSH (dias)

Thu, 19 Jul 2018 11:42:04 GMT

� �� /var/log/messages � � /var/log/syslog ��

SSH (Andrey Mitrofanov)

Thu, 19 Jul 2018 11:35:05 GMT

>[�� ]
> (uid=0)
> Jul 19 15:11:09 deb systemd-logind[802]: New session 3371 of user lion.
> Jul 19 15:11:09 deb systemd: pam_unix(systemd-user:session): session opened for user lion
> by (uid=0)
> Jul 19 15:11:09 deb sshd[9219]: pam_unix(sshd:session): session closed for user lion
> Jul 19 15:11:09 deb systemd-logind[802]: Removed session 3371.
> Jul 19 15:11:09 deb systemd: pam_unix(systemd-user:session): session closed for user lion
> �� dir � �� , � �
> bash_history �� .
> �� ?

�� :

Mar 14 17:25:52 server193741 bash: HISTORY: PID=8543 UID=0 less /var/log/messages

?