[SunHELP] trace root commands

[Nicholas Dronen]

On Wed, Nov 07, 2001 at 10:57:55AM -0500, s at avoidant.org wrote:
> s at avoidant.org wrote:
> > 
> > I've hacked GNU bash to log everything everyone does, with timestamps.
> 
> 
> Oh yeah, it logs to /root/.secret/
> 
> You probably need to know that. If you want to change where it logs,
> look at readline/history2.c

Or, perhaps more conservatively, you can simply set up auditing, no?