[sudo-users] sudoreplay "best practice" questions

[Divan Santana]

Todd C. Miller <Todd.Miller at courtesan.com> writes:

> On Wed, 05 Oct 2016 11:14:41 +0200, Divan Santana wrote:
>
>> Is it possible to configure sudo in such a way that if the log directory
>> is full or unaccessible (remote share goes down) for sudo subsystem to
>> continue functioning?
>
> In sudo 1.8.18 there is a new sudoers setting, ignore_iolog_errors,
> that will allow sudo to continue running when the I/O log cannot
> be written to.

This is great! Exactly what we need. I've also logged a call with Red
Hat to back port this. Whether they actually do is another thing though.

For now, we'll look at some scrip to meet our requirements.

Thanks Todd.