log to new file

[Todd C. Miller]

I'm assuming here that RedHat configures sudo to log to the authpriv
syslog facility by default.

You have two options:
  1) configure sudo to syslog to a different facility.
     At the top of /etc/sudoers use a line like:
	Defaults	syslog=local2
     Then create /var/log/sudo.log and do the syslog.conf
     changes you mention in your message.

  2) configure sudo to log to a file.
     At the top of /etc/sudoers use a line like:
	Defaults	logfile=/var/log/sudo.log

 - todd