[sudo-users] sudo-users Digest, Vol 106, Issue 1

Sprouse, Daniel DanielSprouse at catholichealth.net
Wed Oct 5 12:48:03 EDT 2011


 maybe this cpan item? I am looking for a way to force users to type sudo even after they are elevated in sudo, which isn't looking like I am going to get an answer, but your problem sounds like one that perl coders have probably solved so many times that they may have written up something like:

http://search.cpan.org/~landman/Sudo-0.21/lib/Sudo.pm


Daniel Sprouse
Unix Systems Analyst
720-875-7706
CHI - Information Technology Services
Technical Services
Server - UNIX - Englewood

-----Original Message-----
From: sudo-users-bounces at courtesan.com [mailto:sudo-users-bounces at courtesan.com] On Behalf Of sudo-users-request at courtesan.com
Sent: Wednesday, October 05, 2011 10:00 AM
To: sudo-users at sudo.ws
Subject: sudo-users Digest, Vol 106, Issue 1

Send sudo-users mailing list submissions to
	sudo-users at sudo.ws

To subscribe or unsubscribe via the World Wide Web, visit
	http://www.sudo.ws/mailman/listinfo/sudo-users
or, via email, send a message with subject or body 'help' to
	sudo-users-request at sudo.ws

You can reach the person managing the list at
	sudo-users-owner at sudo.ws

When replying, please edit your Subject line so it is more specific than "Re: Contents of sudo-users digest..."


Today's Topics:

   1. Using sudo-io logging to track user activity while	using
      raised privileges (Amelia Nilsson)


----------------------------------------------------------------------

Message: 1
Date: Wed, 5 Oct 2011 15:29:37 +0200
From: Amelia Nilsson <amelia at linuxchick.se>
To: sudo-users at sudo.ws
Subject: [sudo-users] Using sudo-io logging to track user activity
	while	using raised privileges
Message-ID: <20111005132937.GA386 at draco.linuxchick.se>
Content-Type: text/plain; charset=us-ascii

Hi sudo users!

I'm new to this list and have been searching the archives for information but haven't found what I was looking for.

I'm using the sudo-io logging to log users activity while using sudo. However, I only need the input data and for security reasons I shouldn't collect and save the output data from commands run with raised privileges. So far so good, by only using the log_input option. I can see that all data is there in the files for the session. Since I don't have any output data I can't use the sudoreplay function to play back a session, but that is fine because that's not the way I want to use this information.

To my question, is there any way to get a nicely formated output containing what commands was run during the session together with timestamps? To me it seems that all data for this is there, but I can't figure out if there's already a built-in way to do this or if someone else have encountered the same problem and hacked something together.

Best regards,
Amelia Nilsson

--
This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.



------------------------------

____________________________________________________________
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users

End of sudo-users Digest, Vol 106, Issue 1
******************************************





More information about the sudo-users mailing list