Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rootsh]

Rootsh is a wrapper for shells that provides auditing capabilities.

Rootsh is a wrapper for shells which logs all echoed keystrokes and terminal output to a file and/or to syslog. Its main purpose is the auditing of users who need a shell with root privileges. They start rootsh through the sudo mechanism.

2 questions
5
votes
1 answer

rootsh running issue in normal user

I have installed rootsh and it's working fine in CentOS 6. But its logs are written both to /var/log/messages and /var/log/rootsh/. I want the logs to only be written to /var/log/rootsh/, not to /var/log/messages. When I run the command from root,…
niraj vara
  • 49
  • 4
2
votes
1 answer

Errors when installing rootsh on Ubuntu

I'm installing rootsh 1.5.3 on Ubuntu 10.04 LTS (following this guide) and I get: $ make && make install Making all in src make[1]: Entering directory `/tmp/rootsh-1.5.3/src' make all-am make[2]: Entering directory `/tmp/rootsh-1.5.3/src' if gcc…
Sfisioza
  • 592
  • 2
  • 8
  • 18