syslog all commands

David Scheidt dscheidt at
Mon Jun 19 01:24:21 UTC 2006

On Sun, Jun 18, 2006 at 06:06:45PM -0700, Lawrence Horvath wrote:
> Date: Sun, 18 Jun 2006 18:06:45 -0700
> From: Lawrence Horvath <lordsporkton at>
> To: freebsd-questions at
> Subject: syslog all commands
> Im looking for a way to syslog all commands run my a group of users, i
> was looking at the authpriv.debug but it doesn't log _every_ command,
> is there anyother way to syslog all the commands run by a user?

Is process accounting good enough?  It'll record the name of the
commands run by all users, what terminal they were run from, how much
cpu time they used, and start and stop times.  

See the man pages for acct(5) and lastcomm(1).  It's turned on by
setting accounting_enable="YES" in /etc/rc.conf, and running
/etc/rc.d/accounting start


More information about the freebsd-questions mailing list