On Jan 10, 2025, Arnt Karlsen wrote:
> On Fri, 10 Jan 2025 09:36:04 -0500, Dan wrote in message
> <Z4EwVAx4Z1VTMSVS@???>:
>
> > On Jan 10, 2025, Arnt Karlsen wrote:
> > > On Fri, 10 Jan 2025 05:15:59 -0500, Dan wrote in message
> > > <Z4DzX4HO31TSUhRj@???>:
> > > > On Jan 09, 2025, Walter Dnes wrote:
> > > > > 3) What critical portions of the system should I back up
> > > > > regularly? Right now I expect that it should be something
> > > > > like...
> > > > >

> > > > > * /etc
> > > > > * /root
> > > > > * /home/user2
> > > > > * /home/waltdnes    

> > > >
> > > > Yes, No, Yes, Yes.
> > > >
> > > > "/root" is the homedir for the "root" user. I wouldn't expect any
> > > > actual data there, especially given your above comment about using
> > > > sudo.
> > >
> > > ..root's command line history, package management history and
> > > config change history warrants rsync cron jobs, IMNTHO, say
> > > into /home/configtracker, on both boxes.
> >
> > Insofar as I am aware, none of which exist when doing "sudo
> > whatevercommand", since everything is being executed by the calling
> > user (i.e. "sudo vi /etc/theconfigfile" shows up in my user's
> > history,
>
> ...making it visible to any cracker visiting either one of your boxes.

So, I went and checked it, since you offered no substance here.

"sudo command" does in fact end up in the user's history, not
/root/bash_history.

--
|_|O|_|
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860