I want to to log every interactive login sessions of each user (including root) in AIX 5.3 in a way that:
1) user can not bypass this mechanism, or delete the logs of his/her sessions
2) just want to log the interactive shells, not the others
3) no performance impact
4) remote logging facility is preferrable
I have found some login scripts including "script command" but these violete the rule #1.
Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.