Skip to Content
0

How to Know the which user run which command in Linux server

Aug 04, 2017 at 10:21 PM

53

avatar image
Former Member

Hi All,

Recently we have issue like in /usr/sap/trans folder all files/folders permissons are changed from prod SID to Non prd SID. so, for this how to How to Know the which user run which command in Linux server to change this permission?

it means which user/terminal server, date and time?

it is very helpful to find out the root-cause

Regards,

Basis

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Frank Schuler
Aug 05, 2017 at 07:23 AM
0

There are quite a few options for user activity tracing in Linux, but one I like is the auditd daemon. For Red Hat Enterprise Linux you can find the documentation here:

System Auditing

Best regards

Frank

Share
10 |10000 characters needed characters left characters exceeded