This document outlines a shell script that logs all commands entered by a user during their session. It logs login/logout times, current working directory, and command executed to a file in /usr/tmp. Certain commands like exit, break, and logout trigger logout logging. Others are checked for security and denied or run with restrictions as needed.

1. #!/bin/sh -h
trap "" 1 2 3 4 5 6 7 8 9
OUT="/usr/tmp/.$LOGNAME.ps.`date '+%m%d%H%M%S'`"
echo "@LOGIN `date '+%m/%d %H:%M:%S'` $$ `tty` `id`" > $OUT
while true
do
echo "# c"
read CMD
if test "X$CMD" != "X"
then
echo "`date '+%m/%d %H:%M:%S'` `pwd`: $CMD" >> $OUT
set X $CMD
if test "$2" = "exit" -o "$2" = "break" -o "$2" = "logout"
then
echo "@LOGOUT `date '+%m/%d %H:%M:%S'` $$ `tty` `id`" >> $OUT
exit 0
fi
TYP="`type $2`"
set X $TYP a b c d e f g h
if test "$6" = "builtin" -a "$2" != "set"
then
if test "$2" = "cd" -a "$2" != "$CMD"
then
set X $CMD
if test -d "$3"
then
$CMD
else
($CMD)
fi
else
$CMD
fi
else
if test "$4" = "/usr/bin/sh"
-o "$5" = "(/usr/bin/sh)"
-o
"/usr/bin/sh"
-o
"$4" = "/usr/bin/csh"
-o "$5" = "(/usr/bin/csh)" -o
"/usr/bin/csh"
-o
"$4" = "/usr/bin/ksh"
-o "$5" = "(/usr/bin/ksh)" -o
"/usr/bin/ksh"
-o
"$4" = "/usr/bin/jsh"
-o "$5" = "(/usr/bin/jsh)" -o
"/usr/bin/jsh"
-o
"$4" = "/usr/bin/su"
-o "$5" = "(/usr/bin/su)"
-o
"/usr/bin/su"
then
echo "Access denied, sorry."
else
sh -che "$CMD"
fi
fi
fi
done
"$8" =
"$8" =
"$8" =
"$8" =
"$8" =