I know all commands user sends to server are automatically logged into
I want to give access to my PC to my colleague (I've already gave hime some limited access to use sudo via
/etc/sudoers), even that i trust him, i would love to reliably know what did he done on my PC - so i need to be sure:
~/.bash_historycannot be compromized (he cannot truncate or somehow change the file)
- he cannot change critical env variables, which would affect logging - like HISTCONTROL, HISTFILE or HISTSIZE
- he cannot run something like
I don't know if i forgot something, but i just need to be sure, that after i come to PC, i will see everything what he has done.