Linux添加日志审计

# mkdir -p /var/log/usermonitor/
# echo usermonitor >/var/log/usermonitor/usermonitor.log
# chown nobody:nobody /var/log/usermonitor/usermonitor.log
# chmod 002 /var/log/usermonitor/usermonitor.log
# chattr +a /var/log/usermonitor/usermonitor.log
# chattr +a /var/log/usermonitor/usermonitor.log
# vi /etc/profile
export HISTORY_FILE=/var/log/usermonitor/usermonitor.log
export PROMPT_COMMAND='{ date "+%y-%m-%d %T ##### $(who am i |awk "{print \$1\" \"\$2\" \"\$5}")  #### $(id|awk "{print \$1}") #### $(history 1 | { read x cmd; echo "$cmd"; })"; } >>$HISTORY_FILE'