file monitoring

hi all

in my server all the users have the same paswd like "abc" .... i need to keep track of who changes the files using the ip addressess.... so once when a person logs in .. i need to monitor the actions or the files chagned by that person and store it in a log file .. can some one help me with this ?

check out the following commands :

aureport

ausearch

auditctl

script command records all the action on the console and puts the information in log file typescript