Logging SSH commands to debian lenny

Question

SSH

There is a server with debian, from time to time people go there under the root and perform certain actions, the question is: what is the best way to do it so that all the commands entered via SSH are logged? (OpenSSH5)

Answer 1

Have a look at Snoopy Logger or grsecurity .
From a cannon to sparrows, of course, but, it seems, your task should be solved

Answer 2

Ruth can do everything. Anderstand?

Answer 3

In debian, ssh seems to write to /var/log/auth.log by default...

Answer 4

On CentOS, I did it via /root/.bashrc like this:

export HISTTIMEFORMAT='%Y.%m.%d-%T :: ' HISTFILESIZE=5000 HISTSIZE=5000
export HISTCONTROL=erasedups
PROMPT_COMMAND='history 1 >> /${HOME}/.allhist'

With Debian, I worked a little, but I think the difference will not be big.

Answer 5

blog.rootshell.be/2009/02/28/bash-history-to-syslog/

Answer 6

Post back as success :)

Answer 7

With us, all this was sent by syslog to a neighboring server :)