[sudo-workers] limit io logging per source

Daniele Palumbo daniele at retaggio.net
Thu Apr 27 14:44:31 MDT 2017


Il giorno 27 apr 2017, alle ore 21:59, Todd C. Miller <Todd.Miller at courtesan.com> ha scritto:
> There's not currently any way to apply policy based on the parent
> process (in your example, cron).
> 
> However, you can disable I/O logging for the particular command(s)
> that the user is running via cron.  Just add the NOLOG_OUTPUT tag
> to the command in the user's sudoers entry.

Hi Todd,

Thanks for the quick reply.

Unfortunately this would be an exclusion that has to be triggered machine per machine, while the generic exclusion would be much way more efficient.

Given that, would be possible to implement this new enhancement?

Thanks,
Daniele
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://www.sudo.ws/pipermail/sudo-workers/attachments/20170427/223c9e6c/attachment.bin>


More information about the sudo-workers mailing list