[SATLUG] How to monitor SSH session?

[Sean Carolan]

> > > I was going to say that if you just want to see the commands and not the
> > > output you could do a tail -f on .bash_history, but it seems that it
> > > doesn't
> > > update the file in real time, but only after they log out.

We have reached a reasonable solution - the user gets sudo access so
that any commands run as root will be logged to /var/log/secure.  The
normal .bash_history can be reviewed after they log out.  I don't
really *need* to see every command as it's typed, just was wondering
if there was an easy way to do it.