Can ~/.bash_history file contents of a particular user be treated as authentic source of command executions?
Issue
- The user executed some commands and it's required to audit what all commands the user executed.
- Can
~/.bash_history
file contents of a particular user be treated as authentic source of command executed by that user?
Environment
- Red Hat Enterprise Linux 4/5/6/7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.