Welcome to the Linux Foundation Forum!

Intercept executed commands in Linux

I need to know if it is possible to intercept executed commands at user space. I know that there are some methods like LD_PRELOADING and catching execve() syscall when a binary uses this but I need to know how to do this against the shell a Linux machine is running so I'd be able to intercept the commands and log them.


Upcoming Training