In the sudoers file the last match is what gets used so that final entry: USER HOST=(otheruser) LOG_INPUT:LOGOUTPUT:ALL will cause everything to be logged. If you made it the first entry instead of the last it should behave the way you want. - todd