syslog all commands

[David Scheidt]

On Sun, Jun 18, 2006 at 06:06:45PM -0700, Lawrence Horvath wrote:
> Date: Sun, 18 Jun 2006 18:06:45 -0700
> From: Lawrence Horvath <lordsporkton at gmail.com>
> To: freebsd-questions at freebsd.org
> Subject: syslog all commands
> 
> Im looking for a way to syslog all commands run my a group of users, i
> was looking at the authpriv.debug but it doesn't log _every_ command,
> is there anyother way to syslog all the commands run by a user?
> 

Is process accounting good enough?  It'll record the name of the
commands run by all users, what terminal they were run from, how much
cpu time they used, and start and stop times.  

See the man pages for acct(5) and lastcomm(1).  It's turned on by
setting accounting_enable="YES" in /etc/rc.conf, and running
/etc/rc.d/accounting start

David