sudosh can be used as a default login shell or a filter that takes advantage of PTY devices in order to sit between the user's keyboard and a program, in this case a shell.
It was designed specifically to be used in conjunction with sudo, and allows the execution of a root or application shell with logging. It is basically a VCR and will record root shell sessions and also has the ability to play back the sessions as they were originally recorded.
sudosh records all input/output, keyboard input, and timing information so that the session can be played back in the original format.
What's New in This Release:
· Utilizes ITIL best practices.
· An enterprise view of Unix access.
· Enterprise-level audit reporting tools for Sarbanes-Oxley.
· Customizable audit reports via CSS.
· An embedded transactional SQL92 relational database.
· Load balancing.
· Disaster recovery.
· SSL encryption and PKI authentication.
· The ability to audit file transfers and remote command execution.
· Configurable default shells.
· Audit logs are digitally signed for integrity.
· Client and server configuration files for easy management.
· Idle session timeout.
· Displays corporate policy before each session.