How to write user actions in Linux?

Question

linux

There are virtual machines with Red Hat Enterprise Linux 7. The current DE is Gnome3. They are connected remotely from the workplace to process sensitive data. They are in an isolated, controlled environment. This data must not be allowed to leak to the user's physical machine.
Task:
What is the best way to write user actions on a virtual machine? It is necessary to write X11 in one form or another and, if possible, additionally monitor actions in the form of logs. Preferably free software.
UPD:
It is likely that it would be more optimal to take screenshots in b/w with good compression and send them to a separate server.

Answer 1

If you need screenshots, then write the script ahead, there's nothing complicated.
Another question is what kind of data is this, if it is some kind of program, then it can cut the user's rights and, without loading dm, immediately run this program?
If dm is needed, then you can make a separate user for the operation of this program and its associated directories. The user has a shortcut to launch the program, the launch script itself is read-only and executable, the current user has a complete ban on rwx in the program directory.
Logs can be included, there are many different ones and in each individual program. In general, in more detail what needs to be protected from removal, and actually how it is supposed to be taken out, is there an Internet connection on the virtual machine, is it possible to forward usb, etc.

Answer 2

I'm thinking of using imagemagick in cron with saving to some limited buffer. Then through rsync to a remote server via ssh. Here only one more question arises. The user must not have the right to suppress the script. And the script must run in its graphical environment.