finding changes made to configurations

Peter Clapham pc7 at sanger.ac.uk
Thu Mar 3 15:22:06 UTC 2011


tripwire ?
> Did they clear out their history?
>
> /home/user/.bash_history would seemingly be a pretty good place to 
> start. Also you could check out their username in /var/log, and see 
> all instances of what they might have done....
>
> This is seemingly another vague question, any more information on what 
> you are looking for? If you want something going forward, you could 
> use $(script) for all users on the systems and have it right to an 
> rsync'ed folder for future review.....
>
> ~M
>
> On Thu, Mar 3, 2011 at 10:05, Tapas Mishra <mightydreams at gmail.com 
> <mailto:mightydreams at gmail.com>> wrote:
>
>     Hi,
>     I wanted to know if on a server 2-3 people have SSH access and one of
>     the person does some changes and leaves the job.
>     Is there any tracking tool which can track what things were
>     installed or
>     what changes were made by team individuals at a later date.
>
>     --
>     http://mightydreams.blogspot.com
>
>     --
>     ubuntu-server mailing list
>     ubuntu-server at lists.ubuntu.com <mailto:ubuntu-server at lists.ubuntu.com>
>     https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
>     More info: https://wiki.ubuntu.com/ServerTeam
>
>
>
>
> -- 
> Miano, Steven M.
>    727.244.9990
> <http://stevenmiano.com> <http://facebook.com/mianosm> 
> <http://twitter.com/mianosm>
>




-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20110303/d9a612de/attachment.html>


More information about the ubuntu-server mailing list