Did they clear out their history?<div><br></div><div>/home/user/.bash_history would seemingly be a pretty good place to start. Also you could check out their username in /var/log, and see all instances of what they might have done....</div>
<div><br></div><div>This is seemingly another vague question, any more information on what you are looking for? If you want something going forward, you could use $(script) for all users on the systems and have it right to an rsync'ed folder for future review.....</div>
<div><br></div><div>~M<br><br><div class="gmail_quote">On Thu, Mar 3, 2011 at 10:05, Tapas Mishra <span dir="ltr"><<a href="mailto:mightydreams@gmail.com">mightydreams@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi,<br>
I wanted to know if on a server 2-3 people have SSH access and one of<br>
the person does some changes and leaves the job.<br>
Is there any tracking tool which can track what things were installed or<br>
what changes were made by team individuals at a later date.<br>
<br>
--<br>
<a href="http://mightydreams.blogspot.com" target="_blank">http://mightydreams.blogspot.com</a><br>
<font color="#888888"><br>
--<br>
ubuntu-server mailing list<br>
<a href="mailto:ubuntu-server@lists.ubuntu.com">ubuntu-server@lists.ubuntu.com</a><br>
<a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-server" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-server</a><br>
More info: <a href="https://wiki.ubuntu.com/ServerTeam" target="_blank">https://wiki.ubuntu.com/ServerTeam</a><br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Miano, Steven M.<div> 727.244.9990</div><div><a href="http://stevenmiano.com" target="_blank"><img src="http://stevenmiano.com/favicon.ico"></a> <a href="http://facebook.com/mianosm" target="_blank"><img src="http://i.imgur.com/Nel2L.png"></a> <a href="http://twitter.com/mianosm" target="_blank"><img src="http://i.imgur.com/VcaF0.png"></a></div>
<br>
</div>