I was wondering how to audit user or root commands in bash/sh and founded that simple script written in bash is very basic. For example when type sh command the looging in bash stopped working.
I founded the simply and very good application called snoopy
To install snoopy in Debian Linux type following command:
sudo apt-get install snoopy
Of course chose yes
Now logout and login back to server the logs of command line should be in the following location:
sudo tail -f /var/log/auth.log
antispam apache2 apt apt-get callout cd commands database Debian debian 9 debian 10 domain domain-hosting exim fpm hosting how to https imap imaps linux mail man MySQL nginx php poland pop pop3 pop3s price prize repo repository scarthgap server snoopy sr635 thinksystem update upgrade VDI web www Yocto