Process Monitor for Linux is a small kernel module that allows you to watch all programs executed on the system. It is useful for generating full listings of programs (and their supplied arguments) run by certain "potentially dangerous" users on a system.
