Show IP address in history
On Linux Server, history command shows previously executed commands. If you have many people working on a server, it is better log IP address of the user who run the command along with time for security reason.
To log, IP and date, create file
|
1 |
vi /usr/local/bin/sok_detailed_history |
In the file, add
|
1 2 3 4 5 6 7 8 9 10 |
#!/bin/bash # Author: ServerOK.in # Email: [email protected] # Web; https://serverok.in SET_IP=`echo -n $SSH_CLIENT|cut -d' ' -f1` if [[ `tail -n1 ~/.bash_history|rev|cut -c -4|rev` != `date +%Y` ]] then sed -i "\$s/$/ #entered by `echo -n $SET_IP` on `date`/g" ~/.bash_history fi |
Make it executable
|
1 |
chmod 755 /usr/local/bin/sok_detailed_history |
Create file
|
1 |
vi /etc/profile.d/sok_detailed_history.sh |
Add following to the file
|
1 |
export PROMPT_COMMAND="history -a; /bin/bash /usr/local/bin/sok_detailed_history" |
Logout and login to server. Now your history will also record IP address that is used to login to server. PROMPT_COMMAND environment variable allow you to execute a command every time command promt is shown. To see how PROMPT_COMMAND works, just run
|
1 |
PROMPT_COMMAND="echo I am here" |
Example
|
1 2 3 4 5 6 7 |
boby@sok-01:~$ PROMPT_COMMAND="echo I am here" I am here boby@sok-01:~$ I am here boby@sok-01:~$ I am here boby@sok-01:~$ |
Every time i press enter, command specified in PROMPT_COMMAND variable get executed. Just close the current terminal to undo the change.
See history