| I suggest getting hold of the supervisor series. The latest version,
available on sigtapes, decus CDs, or places like ftp.wku.edu
(see supervisor.zip) has the ability to log sessions. It is only
for vax, but we're talking vax here...and it comes with src.
For alpha, a freebie driver that intercepts the terminal port-class
interface exists, though it'll do only one terminal at a time.
There really isn't any simple way to avoid having two processes
though, with this sort of function. One does the logging, the other
is the user session.
Note too that watch or supervisor will NOT work with RT terminals.
For that, though, logger or photo will work...as will BOSS.
The folks wanting to do this should be aware that capturing
keystrokes and output can:
1. take lots of disk, and
2. be very confusing.
2 is the case because you can write obscure DCL, so that typing
something like "del" can be made to mean "copy [somewhere]*.*
somewhere-else:" or whatnot. If someone knows (s)he's being watched,
they can spread the confusion over a lot of extra output, and express
things in hex that may look like innocent calculations in part...
Remember...for an audit log to do you much good, someone has to know
what it means.
|