12

Would it be possible to securely store all issued shell commands (.bash_history etc) in a block chain to prevent users from modifying their history?

I'd be interested in implementing this for several multi user systems, though I wonder why no one seems to have adopted this idea yet. Many attacks involving shell access, in some way or another, could be traced better if the command history was accurate; malevolent users could not cover up their actions, and so on.

  • 1
    Is it possible: surely. Why is it not done: cost. – M'vy Sep 22 '16 at 11:59
  • 8
    Why blockchain? If you just want an unmodifiable history, just commit every command to a code repository. – billc.cn Sep 22 '16 at 12:11
  • 2
    blockchain only helps to prove that a particular chain is trusted, it won't stop deletion or modification of the chain. – Chaim Geretz Sep 22 '16 at 21:20
  • 2
    I feel like "blockchain" is a buzzword that people like to use just for the sake of gaining buzzword points. What's wrong with a normal database on a secured computer? – immibis Sep 23 '16 at 1:20
  • 1
    @MoFriedrich Blockchains are neither local, nor set-up-and-forget, nor secure for the kind of security properties you want here. – immibis Sep 23 '16 at 4:55
32

The shell is probably the wrong place to do a logging of commands. A user could simply execute another shell without history or execute commands read from stdin without leaving a trace in the history. Thus it does not protect a lot against malevolent users.

Instead of securing the shell history one should securely log the commands executed by a user, no matter if these are executed by the shell or not. And this should be done so that the user is not able to execute any commands without trace. There is actually already an audit framework which can do this, see System Auditing in the RHEL documentation.

And while blockchain sounds like a nice (and hype) technology: there are other technologies which provide the necessary security without all the overhead. For logging the activity of a non-privileged user it is enough to do the logging as root. In case one fears privilege escalation one can use the existing mechanisms of syslog to log to a remote server. And some syslog implementations also provide a way to sign the messages to prove their origin.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.