Centos7 分用户记录历史命令至日志文件

#1.修改 /etc/bashrc

vim  /etc/bashrc
#history
export PROMPT_COMMAND='{ msg=$(history 1 | { read x y ; echo $y ;}); logger -p local1.notice   [$(who am i)]["uid=$(whoami)"][pwd=`pwd`]["$msg"]; }'

source /etc/bashrc


#2.修改 /etc/rsyslog.conf

vim /etc/rsyslog.conf
#新增以下一行
local1.notice /var/log/history.log

#重启服务
systemctl restart rsyslog.service

#3.修改/var/log/history.log的权限
chmod 600 /var/log/history.log