[sudo-users] Deny all command on /var/log/sudolog

[Jordi Espasa Clofent]

Edward Capriolo escribió:

> With your sudo configuration it does not seem like you can since you
> are using wild card configurations a user can sudo any program like
> vi. I use this type of configuration on trusted administrators. I
> would suggest doing a remote syslog. This way no one will be able to
> change the syslog audit trail.

Yes. It's a option.

-- 
Thanks,
Jordi Espasa Clofent