asked on

How to track root actions through GUI?

From my previous post, I know how to trace a person's command history. But how do I do so if the root uses GUI instead of command-line?

I need to track my sysadmin's actions whenever he uses the GUI for Checkpoint FW-1 (for firewall maintenance) and OpenWindows (for accounts maintenance).

The firewall server is running on Solaris 2.6

If there are any 3rd party utilities, please include their URL as well. Thanks in advance.

jlevie

Basically you can't log someones actions when they are manipulating a GUI interface. All that could possibly be captured external to the application would be the mouse location (in screen coordinates) and any text typed in. That would be of little use without knowing what part of the GUI the mouse had been over. It would be up to the application to provide a history logging mechanism. Firewall-1 might be able to do that, but I don't think that AdminSuite or admintool does.

You could use a video splitter to have the monitor of interest displayed on a second monitor for viewing. Or run a "record & playback" screen capture application (but the log files will be huge).

samri

heemeng,

If you are really interested to know everything a user (or administrator) on your system is doing, I bet you can turn on ACL on each of the file on your server. I think that you can have a very detail logging (and HUGE log file).

Just a coment.

ASKER CERTIFIED SOLUTION

roy911

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

heemeng

ASKER

Thanks guys for the comments.