sudo and sylogd logging
jepeway at blasted-heath.com
Sat May 8 18:22:34 EDT 2004
> It seems like syslogd does not acknowledge "sudo"
I think sudo logs at facility local2 by default.
If AIX has "logger" you can check that your syslog.conf
file is doing what you want with something like
logger -p local2.err Where does this message go\?
and see if that message shows up in any of the files
mentioned in /etc/syslog.conf.
> In my syslog.conf file I entered:
> *.* /var/adm/sudolog
Well, if /var/adm/sudolog is empty, but you see messages
showing up in other files like /var/adm/messages or wherever,
then I think you've got the "syslogd is picky as hell about
whitespace" problem. Be sure there are no spaces in the *.* line.
Use tab characters instead.
Chris <jepeway at blasted-heath.com>.
More information about the sudo-workers