[CLUE-Tech] syslog question

[Dale K. Hawkins]

Jeffery Cann <fabian at jefferycann.com> writes:

> On Wednesday 11 June 2003 06:49 pm, Charles Oriez wrote:
> > I have a client running Red Hat v9.0 on a server.  He wants to log all
> > attempts by users to access files that they are not authorized to
> > access.  He's been trying to configure the syslogd conf file appropriately,
> > and getting nowhere.  Users get the expected permissions error on their
> > consoles, but nothing shows up in any log. Ideas?
> 
> Perhaps you could run terminal sessions through expect?

Or typescript.  Just keep in mind that these could get very long, very
quickly.  What about just capturing stderr?   I wonder (but have no
other useful suggestions).

-Dale