http://my.oschina.net/xiangpang/blog/532999
http://my.oschina.net/chaichuan/blog/508494
http://my.oschina.net/leejun2005/blog/292709
http://my.oschina.net/u/1590519/blog/336127
Linux用户行为日志审计
原文：http://www.cnblogs.com/diyunpeng/p/5137211.html
