Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!swrinde!cs.utexas.edu!uunet!crowfix!ian From: ian@crowfix.uucp (Ian Smith) Newsgroups: comp.unix.questions Subject: How to catch a snoopy sysadmin? Message-ID: <1991Mar31.011850.432@crowfix.uucp> Date: 31 Mar 91 01:18:50 GMT Sender: ian@crowfix.uucp (Ian Smith) Distribution: na Organization: CrowFix, Dutch Flat Lines: 13 I am posting this for a friend. His sysadmin is a bit of a snoop, and may be reading everyone's email. Does anyone have advice on how to catch him? We were thinking of snooping ourselves (all users know the root password). Is there, perhaps, some way to keep track of all root commands, or to track root terminal i/o? Any help in snooping on this snoop is greatly appreciated :-). Either email or posting is fine. Thanx. -- ... _._. ._ ._. . _._. ._. ___ .__ ._. . .__. ._ .. ._. Ian Smith, Jr. / uunet!crowfix!ian