Browse Source

Formatting

pull/1/head
Marc Schoechlin 12 years ago
parent
commit
a37c3edb4f
1 changed files with 16 additions and 16 deletions
  1. +16
    -16
      README.md

+ 16
- 16
README.md View File

@ -10,12 +10,12 @@ Usage
* Record session * Record session
``` ```
script -t /tmp/foo/2013-09-11_18-47-45.user1.11931.typescript \
script -t /tmp/foo/2013-09-11_18-47-45.user1.11931.typescript \
2> /tmp/foo/2013-09-11_18-47-45.user1.11931.timing 2> /tmp/foo/2013-09-11_18-47-45.user1.11931.timing
``` ```
* Replay session * Replay session
``` ```
scriptreplay -t /tmp/foo/2013-09-11_18-47-45.user1.11931.timing \
scriptreplay -t /tmp/foo/2013-09-11_18-47-45.user1.11931.timing \
/tmp/foo/2013-09-11_18-47-45.user1.11931.typescript /tmp/foo/2013-09-11_18-47-45.user1.11931.typescript
``` ```
@ -127,29 +127,29 @@ The logged information can also be forwarded to secured logging servers using st
* helpers/auditshell_create_sessionfiles * helpers/auditshell_create_sessionfiles
* Set permission and owner * Set permission and owner
``` ```
chown root:root \
chown root:root \
/usr/local/bin/{scriptreplay,auditshell,auditshell_create_sessionfiles} /usr/local/bin/{scriptreplay,auditshell,auditshell_create_sessionfiles}
chmod 755 \
chmod 755 \
/usr/local/bin/{scriptreplay,auditshel,auditshell_create_sessionfiles} /usr/local/bin/{scriptreplay,auditshel,auditshell_create_sessionfiles}
``` ```
* Patch an install custom "script" implementation * Patch an install custom "script" implementation
``` ```
cd helpers/
git clone git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
cd util-linux.git
patch -p0 < ../auditshell_script.patch
./autogen.sh
make
cp script /usr/local/bin/
chown root:root /usr/local/bin/script
chmod 755 /usr/local/bin/script
cd helpers/
git clone git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
cd util-linux.git
patch -p0 < ../auditshell_script.patch
./autogen.sh
make
cp script /usr/local/bin/
chown root:root /usr/local/bin/script
chmod 755 /usr/local/bin/script
``` ```
* If you like: * If you like:
* Disable string escaping on system which are using rsyslogd (i.e. Ubuntu systems) * Disable string escaping on system which are using rsyslogd (i.e. Ubuntu systems)
* Redirect the auditshell logs to another logfile using syslog configuration * Redirect the auditshell logs to another logfile using syslog configuration
* Change shell of user * Change shell of user
``` ```
chsh -s /usr/local/bin/auditshell <user>
chsh -s /usr/local/bin/auditshell <user>
``` ```
@ -159,11 +159,11 @@ Watch auditshell sessions
* Start session, and execute commands * Start session, and execute commands
* Extract session files * Extract session files
``` ```
/usr/local/bin/auditshell_create_sessionfiles /var/log/messages /tmp/foo
/usr/local/bin/auditshell_create_sessionfiles /var/log/messages /tmp/foo
``` ```
* Replay session * Replay session
``` ```
scriptreplay -t /tmp/foo/2013-09-11_18-47-45.user1.11931.timing \
scriptreplay -t /tmp/foo/2013-09-11_18-47-45.user1.11931.timing \
/tmp/foo/2013-09-11_18-47-45.user1.11931.typescript /tmp/foo/2013-09-11_18-47-45.user1.11931.typescript
``` ```


Loading…
Cancel
Save