#1.Mail partial configuration,set /etc/mail.rc
#2.Below is the main configuration
cat >>/etc/profile<<Share
#Variables
LAST_USER=`last -n 2 |awk 'NR==2{print $1}'`
LOG_FILE_PATH="/tmp/Shared_Operation"
LAST_FILE_LOG=`ls -tl ${LOG_FILE_PATH}/${LAST_USER} |awk -F'[ ]' 'NR==2{print $(NF-0)}'`
USER_IP=`who -u am i 2>/dev/null| awk '{print $NF}'|sed -e 's/[()]//g'`
#Mail Send to Admin
mail -s "The last time $LAST_USER from $USER_IP, the operating information" < ${LOG_FILE_PATH}/${LAST_USER}/${LAST_FILE_LOG}
if [ "$USER_IP" = "" ]
then
USER_IP=`hostname`
fi
if [ ! -d ${LOG_FILE_PATH} ]
then
mkdir $LOG_FILE_PATH
chmod 707 $LOG_FILE_PATH
fi
if [ ! -d ${LOG_FILE_PATH}/${LOGNAME} ]
then
mkdir ${LOG_FILE_PATH}/${LOGNAME}
chmod 4700 ${LOG_FILE_PATH}/${LOGNAME}
fi
export HISTSIZE=4096
DT=`date "+%F_%T"`
export HISTFILE="${LOG_FILE_PATH}/${LOGNAME}/${USER_IP}_$DT"
chmod 600 ${LOG_FILE_PATH}/${LOGNAME}/*lige* 2>/dev/null
Share转载于:https://blog.51cto.com/51inte/1696640
本文介绍了一种在Linux环境下通过配置mail.rc文件和shell脚本实现用户操作记录及通过邮件发送这些记录的方法。该方法能够捕捉用户登录信息及其操作,并将记录文件发送给管理员。

被折叠的 条评论
为什么被折叠?



