I have a requirement to audit all the commands run by a user after he logs into root. Can anyone please help me with it. (for Suse-Linux)
To explain even more simpler
- user alex logs into the server with his username and password
- switches to root user, runs few commands (I want to know what commands were run by Alex after switching into root user) if possible with timestamps