I currently have some systems that multiple people have access to for administration purposes. We've modified the history log so that we capture 2k lines of history per user to help aid in who has done what on the system. However, we would additionally like to capture all keyboard input when we (the administrators) log in, and log it to a file so we can see what changes were made to files once people go into vi to edit them. It will also aid us in documenting when we are going through a compile of software and the like.
How can I do this? CentOS 5.4 if it makes a difference.
There is tty log available.
You might take a look at script and see how it would work for you.
When I have to log shell activity, I sometimes use a combination of rootsh and central logging.