[sudo-workers] Debug

[Todd C. Miller]

On Tue, 01 Dec 2015 04:54:51 -0500, Radovan Sroka wrote:

> I tried debuging sudoers and I'm not able to do it.
> 
> I put this into sudo.conf: Debug sudo /var/log/sudo_debug all at debug or Debug 
> sudoers /var/log/sudoers_debug all at debug and it's not working.
> 
> Sudo doesn't generate plugins debugs, and the second option with sudoers does
> n't generate anything.

What version of sudo are you using?  For sudo 1.8.12 and higher:

    Debug sudoers.so /var/log/sudoers_debug all at debug

will give you a debug log for the sudoers module (note the ".so" suffix).

For sudo 1.8.4 through 1.8.11 it would simply be:

    Debug sudo /var/log/sudo_debug all at debug

for both sudo and the plugin.  The executable/dso name matters and
must match the sudo.conf line.

 - todd