Réf. : how to determine a proper sudo file contents

[steve.bernier at desjardins.com]

You can add the "logfile" for this user:

Defaults:your_user_id  logfile=/var/adm/sudo.log

I prefer to have long line (no line wrap):

Defaults        loglinelen=0

Change "your_user_id" with the user id of the developper, and the sudo.log can be anywhere.

In fact in our configuration, we log everything, from every user:

Defaults logfile=/var/adm/sudo.log

Steve Bernier
Équipe UNIX / Direction Traitement Distribué
Le Groupe CGI
Tél: (514) 281-2393
Fax: (514) 285-3405
Internet: steve.bernier at cgi.ca
________________________________




"john ctr kelly" <john.ctr.kelly at faa.gov>@sudo.ws on 2002-01-24 09:38:43

Envoyé par :   sudo-users-admin at sudo.ws


Pour :    <sudo-users at courtesan.com>
cc :
Objet :   how to determine a proper sudo file contents

Is there a way to allow a user to execute anything and then record what he
is doing so one can set up a proper sudo file.
The developer is taking on a new task and is not sure what he needs access
to.  Since he needs to move rapidly, we dont want to tie his hands by having
him have problems then make a change, test.

    Thanks in advance,
    John