Can ~/.bash_history file contents of a particular user be treated as authentic source of command executions?

Solution Unverified - Updated -

Issue

  • The user executed some commands and it's required to audit what all commands the user executed.
  • Can ~/.bash_history file contents of a particular user be treated as authentic source of command executed by that user?

Environment

  • Red Hat Enterprise Linux 4/5/6/7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In