finding changes made to configurations
Peter Clapham
pc7 at sanger.ac.uk
Thu Mar 3 15:22:06 UTC 2011
tripwire ?
> Did they clear out their history?
>
> /home/user/.bash_history would seemingly be a pretty good place to
> start. Also you could check out their username in /var/log, and see
> all instances of what they might have done....
>
> This is seemingly another vague question, any more information on what
> you are looking for? If you want something going forward, you could
> use $(script) for all users on the systems and have it right to an
> rsync'ed folder for future review.....
>
> ~M
>
> On Thu, Mar 3, 2011 at 10:05, Tapas Mishra <mightydreams at gmail.com
> <mailto:mightydreams at gmail.com>> wrote:
>
> Hi,
> I wanted to know if on a server 2-3 people have SSH access and one of
> the person does some changes and leaves the job.
> Is there any tracking tool which can track what things were
> installed or
> what changes were made by team individuals at a later date.
>
> --
> http://mightydreams.blogspot.com
>
> --
> ubuntu-server mailing list
> ubuntu-server at lists.ubuntu.com <mailto:ubuntu-server at lists.ubuntu.com>
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
> More info: https://wiki.ubuntu.com/ServerTeam
>
>
>
>
> --
> Miano, Steven M.
> 727.244.9990
> <http://stevenmiano.com> <http://facebook.com/mianosm>
> <http://twitter.com/mianosm>
>
--
The Wellcome Trust Sanger Institute is operated by Genome Research
Limited, a charity registered in England with number 1021457 and a
company registered in England with number 2742969, whose registered
office is 215 Euston Road, London, NW1 2BE.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20110303/d9a612de/attachment.html>
More information about the ubuntu-server
mailing list