I want to monitor all user's activity in my server.
Even when the user executes a shell command from some editor like vim I want to
see them in the log file.
I have checked the tool acct but it is not listing the complete commands.
(Please correct me if I have missed some options which does already).
Which Linux tool I should be looking at to solve this problem?
Best Answer
Add this line to your pam config responsible for logins (its system-auth on redhat based distros)
To find out what was done, you can use.
This produces an output like this:
The only downside to this is is can be a little bit difficult to read, but it is much better than most proposed solutions since in theory it could be used to record an entire session, warts n all.
Edit: Oh and you can use aureport to generate a list that can be more helpful.