How can I view the command history of another user?
I am an admin on my machine. I can see normal history by viewing /home/user_name/.bash_history
but I can't see commands of that user_name
when they were doing sudo
.
Is there a way to view all command executed by one user?
Best Answer
On Debian-based operating systems, doing
tail /var/log/auth.log | grep username
should give you a user'ssudo
history. I don't believe there is a way to get a unified command history of a user's normal + sudo commands.On RHEL-based operating systems, you would need to check
/var/log/secure
instead of/var/log/auth.log
.