CentOS

Hi all.
How can I logging all commands in the system?

For example, after added that line to:

• /etc/pam.d/password-auth
  /etc/pam.d/system-auth
  /etc/pam.d/sudo

I can grabbing all keystrokes by root. But, I need by all users.

Welcome to security exposure #1...

Undo that. Look at using the audit daemon and configs instead.

TrevorH wrote:Look at using the audit daemon and configs instead.

Already.
But, it's not helped me.
I wrote to the forum because I've already lost two weeks and without results.

Why are you so sure that you grab only 'root' keystrokes ? It will capture all without passwords.