jpetitt1
MIS
- Sep 16, 2002
- 2
What's the best way to monitor whether rsh/rcp commands are being used? I would like to verify no one is using them before I disable them in favor of ssh.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
how to monitor r-cmds usage
- Thread starter jpetitt1
- Start date
- Status
hungdaemon
IS-IT--Management
You could run find on your system for .rhost files. But another way would be to turn on system auditing (/usr/sbin/audit start). And then use the auditpr command to review the events on the system. You may need to tweak your /etc/default/audit/config file first though, in order to pick up such events.
I would definitely get on ssh as soon as possible though. Too many holes in r commands.
I would definitely get on ssh as soon as possible though. Too many holes in r commands.
- Status