记录所有的登录操作日志

vim /etc/profile

export HISTORY_FILE=/var/log/usermonitor/usermonitor.log
export PROMPT_COMMAND='{ date "+%y-%m-%d %T ##### $(who am i |awk "{print $1" "$2" "$5}")  #### $(id|awk "{print $1}") #### $(history 1 | { read x cmd; echo "$cmd"; })"; } >>$HISTORY_FILE'

source /etc/profile

mkdir /var/log/usermonitor

原文地址:https://www.cnblogs.com/smail-bao/p/6547496.html