how to disable "unset HISTORY"

[G.Wolfe Woodbury]

On 10/16/2012 06:03 AM, Bryn M. Reeves wrote:
> On 10/16/2012 07:52 AM, Tiziana Manfroni wrote:
>> Hi, I have some users that delete .history file (in tcsh shell), so I 
>> can't see their commands.
>> Can I disable the command "unset history"?
>> If it is not possible, what can I do?
> 
> You can't really prevent a user from altering their environment (it's
> just an instruction to their shell which is under their control).
> 

You can turn on "BSD Process Accounting" (which is in the kernel for
Fedora) in the system profile.  This causes the kernel to dump a record
for each process spawned into the system logs.  You will want to install
and use a tool to analyze the logs and keep them to a reasonable size.