cat >>/etc/profile <<"EOF"
echo YSmonitor >> /var/log/audit_cmd.txt
chmod 622 /var/log/audit_cmd.txt
chattr +a /var/log/audit_cmd.txt
export HISTTIMEFORMAT="OP_DATE: [%F %T] OP_CMD: "
export PROMPT_COMMAND='{ date "+%Y-%m-%d OP_USER: $(who am i |awk "{print \$1\" \"\$2\" \"\$5}") OP_PATH: $(pwd) OP_CMD: $(history 1 | { read x cmd; echo "$cmd"; })"; } >> /var/log/audit_cmd.txt'
EOF
source /etc/profile