trouble with syslog and sudo logs
bigjohn_101 at hotmail.com
Wed Jan 23 00:11:51 EST 2002
I've recently installed sudo on a FreeBSD4.4 box and am unable to log to /var/log/sudo.log . All of my sudo logs are going to /var/log/messages. I believe my sudo messages are going to /var/log/messages because the syslog priority of a successful login attempt is "notice" which is set to log to /var/log/messages in my syslog.conf. However even unsuccessful login attempts are logged to /var/log/messages. I have inserted any pertinent information that I could think of below.
Output from sudo -V:
Syslog facility if syslog is being used for logging: local2
Syslog priority to use when user authenticates successfully: notice
Syslog priority to use when user authenticates unsuccessfully: alert
# $FreeBSD: src/etc/syslog.conf,v 22.214.171.124 2001/02/26 09:26:11 phk Exp $
# Spaces are NOT valid field separators in this file.
# Consult the syslog.conf(5) manpage.
# uncomment this to log all writes to /dev/console to /var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
# uncomment these if you're running inn
# news.crit /var/log/news/news.crit
# news.err /var/log/news/news.err
# news.notice /var/log/news/news.notice
# This logs successful and failed sudo attempts to the file /var/log/sudo.log
Thank You in advance,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the sudo-users