Logs :(

[Dana Kaempen]

Nasir wrote:
> Can anybody send me syslog.conf and sudoers file who keeps log via syslog
> I still cant keep any log messages via sudo.
Here's what we use -

/etc/sudoers:
	Defaults                logfile=/var/adm/sudo.log

This works fine for us.  The logfile can be syslog, if you want it to be, e.g.:
	Defaults                logfile=/var/adm/syslog
However, we like to explicitly keep sudo entries separate from regular syslog entries.

Another benefit of specifying log location in /etc/sudoers is that if you ever upgrade (or replace) your system, you don't have to remember to add back the line if syslog.conf is overwritten.  We keep a virgin distribution of the latest & greatest locally compiled version of sudo, including our default /etc/sudoers, so we just lay that down on a (new or upgraded) system & we're ready to go.

Dana
-- 
..d..ecay

mailto:decay at flash.net
------------------------
"Keep the wheels rolling." - Anonymous traffic prophet