I want to log commands executed by an application server(resin) to catch things like "cat /etc/passwd" or "whoami" being executed by user resin.
However, since the user resin uses a /bin/false shell, I can't just edit bashrc file as suggested here
So what are my options to do that?
