I have the need to syslog every command issued by a given set of
users on a given set of systems for security auditing purposes. I want to provide a wrapper around
the shell of their choice, and simply syslog the command before
execution. The problem is that I need to transparently wrap any
given shell, while still giving them any readline-esqe command editing
abilities.
This program will be their login shell, to prevent escape to a non-logging shell.
Are there any modules that can assist me, or is there a standard way
of doing such a thing?