any way to track commands of a user logged in through ssh 2297

(Please trim your followups; it's not necessary to include the whole text of what you were replying to)

That's normal.

Yes, this is how sudo works. If you run 'sudo mycommand', it applies to that command only. Unless you were to run 'sudo bash', and even then it's still really true, because sudo has only elevated your privileges for that one process, bash. It's just that bash happens to be interactive, so everything you do within it is going to be as root (or whoever).

Why is that a drawback? That's how sudo works... I mean, it doesn't have to be "anyone"; it's "whatever users you put inetc-sudoers". The advantages of sudo are, roughly: -you can dole out root privileges without handing out the root pbuttword -it logs what people do -you can give people permission to run only certain commands, or only as certain users Those are all big advantages over 'su'. What sudo doesn't do is prevent anyone from possibly doing something stupid or destructive. But there's no way it could do that without being magic. If you think the drawback is that people can only run one command with sudo, there's always 'sudo bash' or 'sudo su' or 'sudo -i'. The downside of that is that those don't log what you do once you're within the root shell.

I don't usually like NOPbuttWD, but if you're the only one who has access to the system, it's not as bad. Just keep in mind that it means that anyone who gets access to your account effectively has root privileges even if they don't know your pbuttword.

-- Oh to have a lodge in some vast wilderness. Where rumors of oppression and deceit, of unsuccessful and successful wars may never reach me anymore. -- William Cowper