[sudo-users] I/O logging when disk full

[Gustavo Randich]

You're right. In these cases, we have to login as root via console or other
non-SSH medium (in our case mcollective) and make some room, because we
have disabled root access via SSH.

I was thinking about a sudo feature like disabling I/O logging when certain
free space threshold is reached (comparable to Linux EXT filesystem's root
"reserved blocks"), but maybe that introduces a security risk.


On Tue, Apr 26, 2016 at 4:53 AM, Luca Ferrari <fluca1978 at infinito.it> wrote:

> On Thu, Mar 31, 2016 at 9:41 PM, Gustavo Randich
> <gustavo.randich at gmail.com> wrote:
> > Is there a known workaround or preventive measure for this situation?
>
> I don't know any countermeasure, but I guess sudo cannot simply work
> in such an environment since the whole machine is corrupted (allow me
> the term). In other words, that's a work for root, not for sudo, to
> make some room on the filesystem.
>
> Anyway, I would be interested in others with more experience in this
> particular use case to explain how they face it.
>
> Luca
>