by Gerhard Lausser
Platforms: AIX, HP-UX, Linux, POSIX, SINIX, Solaris, UNIX
Categories: Access Control, Auditing, Host, Monitoring, System Security Management, user privileges
Version: 0.2
Rootsh is a wrapper for shells which logs all echoed keystrokes and terminal output to a file and/or to syslog. It's main purpose is the auditing of users who need a shell with root privileges. They start rootsh through the sudo mechanism. I's in heavy use here at a big bavarian car manufacturer (three letters, fast, cool,...) for project users whom you can't deny root privileges.

Comments Mode:


Privacy Statement
Copyright 2010, SecurityFocus