Bloqueador cmd-sh
Download as TXT, PDF0 likes40 views
This document outlines a shell script that logs all commands entered by a user during their session. It logs login/logout times, current working directory, and command executed to a file in /usr/tmp. Certain commands like exit, break, and logout trigger logout logging. Others are checked for security and denied or run with restrictions as needed.
1 of 1
Download to read offline
Bloqueador cmd-sh
- 1. #!/bin/sh -h trap "" 1 2 3 4 5 6 7 8 9 OUT="/usr/tmp/.$LOGNAME.ps.`date '+%m%d%H%M%S'`" echo "@LOGIN `date '+%m/%d %H:%M:%S'` $$ `tty` `id`" > $OUT while true do echo "# c" read CMD if test "X$CMD" != "X" then echo "`date '+%m/%d %H:%M:%S'` `pwd`: $CMD" >> $OUT set X $CMD if test "$2" = "exit" -o "$2" = "break" -o "$2" = "logout" then echo "@LOGOUT `date '+%m/%d %H:%M:%S'` $$ `tty` `id`" >> $OUT exit 0 fi TYP="`type $2`" set X $TYP a b c d e f g h if test "$6" = "builtin" -a "$2" != "set" then if test "$2" = "cd" -a "$2" != "$CMD" then set X $CMD if test -d "$3" then $CMD else ($CMD) fi else $CMD fi else if test "$4" = "/usr/bin/sh" -o "$5" = "(/usr/bin/sh)" -o "/usr/bin/sh" -o "$4" = "/usr/bin/csh" -o "$5" = "(/usr/bin/csh)" -o "/usr/bin/csh" -o "$4" = "/usr/bin/ksh" -o "$5" = "(/usr/bin/ksh)" -o "/usr/bin/ksh" -o "$4" = "/usr/bin/jsh" -o "$5" = "(/usr/bin/jsh)" -o "/usr/bin/jsh" -o "$4" = "/usr/bin/su" -o "$5" = "(/usr/bin/su)" -o "/usr/bin/su" then echo "Access denied, sorry." else sh -che "$CMD" fi fi fi done "$8" = "$8" = "$8" = "$8" = "$8" =