[jlgaddis]

Which is easily defeated, of course ...

[jrcii]

Some file systems support append-only permissions, although I've never used them. I wonder if that would work with bash's history file?

[detaro]

No, since you can just turn it off or prepend all your commands with a space to hide them.

[jrcii]

You can remove ignorespace from HISTCONTROL for the latter, and for the former, can't you just remove chattr's execute permission for that user?

[jlgaddis]

The user can point $HISTFILE elsewhere (e.g., /dev/null), `unset` it, use another shell, ...

[jrcii]

It looks like you could lock down the environment variables with rbash http://unix.stackexchange.com/questions/66627/is-there-anywa...

But that's getting into no-man's land I guess