I was wondering how to audit user or root commands in bash/sh and founded that simple script written in bash is very basic. For example when type sh command the looging in bash stopped working.
I founded the simply and very good application called snoopy
To install snoopy in Debian Linux type following command:
sudo apt-get install snoopy
Of course chose yes
Now logout and login back to server the logs of command line should be in the following location:
sudo tail -f /var/log/auth.log
antispam apache2 callout cd commands database Debian debian 9 debian 10 domain domain-hosting exim fpm hosting how to https imap imaps ksh lenovo linux logging mail man MySQL nginx php poland pop pop3 pop3s price prize server snoopy sr635 system think thinksystem update upgrade users VDI web www