finding changes made to configurations

Steven Miano mianosm at gmail.com
Thu Mar 3 15:14:26 UTC 2011


Did they clear out their history?

/home/user/.bash_history would seemingly be a pretty good place to start.
Also you could check out their username in /var/log, and see all instances
of what they might have done....

This is seemingly another vague question, any more information on what you
are looking for? If you want something going forward, you could use
$(script) for all users on the systems and have it right to an rsync'ed
folder for future review.....

~M

On Thu, Mar 3, 2011 at 10:05, Tapas Mishra <mightydreams at gmail.com> wrote:

> Hi,
> I wanted to know if on a server 2-3 people have SSH access and one of
> the person does some changes and leaves the job.
> Is there any tracking tool which can track what things were installed or
> what changes were made by team individuals at a later date.
>
> --
> http://mightydreams.blogspot.com
>
> --
> ubuntu-server mailing list
> ubuntu-server at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
> More info: https://wiki.ubuntu.com/ServerTeam
>



-- 
Miano, Steven M.
   727.244.9990
<http://stevenmiano.com>       <http://facebook.com/mianosm>
<http://twitter.com/mianosm>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20110303/36df8a29/attachment.html>


More information about the ubuntu-server mailing list