Re: sudo logging

2009-07-28 Thread Berthold Cogel
Chris Davies schrieb: > Berthold Cogel wrote: >> [...] we don't want them do be root for some reasons. > >> Surely they can break the setup if they want. But they gain nothing if >> they do. > > Your two statements seem to be mutually exclusive...? > > Somewhat puzzled, > Chris > > It's a gr

Re: sudo logging

2009-07-26 Thread Chris Davies
Berthold Cogel wrote: > [...] we don't want them do be root for some reasons. > Surely they can break the setup if they want. But they gain nothing if > they do. Your two statements seem to be mutually exclusive...? Somewhat puzzled, Chris -- To UNSUBSCRIBE, email to debian-user-requ...@list

Re: sudo logging

2009-07-25 Thread Mag Gam
interesting indeed Does anyone have any experience with: http://freshmeat.net/projects/sudoscript/ On Fri, Jul 24, 2009 at 9:55 AM, Berthold Cogel wrote: > Chris Davies schrieb: >> Berthold Cogel wrote: >>> We're doing somthing like this in /etc/sudoers: >> >> >>> Cmnd_Alias      SHELLS =      

Re: sudo logging

2009-07-24 Thread Berthold Cogel
Chris Davies schrieb: > Berthold Cogel wrote: >> We're doing somthing like this in /etc/sudoers: > > >> Cmnd_Alias SHELLS =/bin/sh, \ >>/bin/bash, \ > [...] > >> TRUSTED_USR ALL = NOPASSWD:ALL ,!SHELLS, NOROOT > >

Re: sudo logging

2009-07-23 Thread Chris Davies
Berthold Cogel wrote: > We're doing somthing like this in /etc/sudoers: > Cmnd_Alias SHELLS =/bin/sh, \ >/bin/bash, \ [...] > TRUSTED_USR ALL = NOPASSWD:ALL ,!SHELLS, NOROOT Surely this breaks trivially? ln

Re: sudo logging

2009-07-22 Thread Scott Gifford
Berthold Cogel writes: [...] > We're doing somthing like this in /etc/sudoers: > > > Cmnd_AliasSHELLS =/bin/sh, \ > /bin/bash, \ > /bin/bash2, \ [...] > TRUSTED_USR ALL = NOPASSWD: ALL ,!SHELLS, NOROOT This works well f

Re: sudo logging

2009-07-22 Thread Berthold Cogel
Mag Gam schrieb: > We have many users at my university engineering lab. Some professors > need commands for root and of other users, so we decided to setup sudo > permissions. I was wondering if there is a way to log all commands > when they sudo into an account or root account. > > I would like t

Re: sudo logging

2009-06-11 Thread Mag Gam
I though there was already a tool which integrates sudo and script. This is the combination I was looking for. On Thu, Jun 11, 2009 at 2:02 AM, Frank Lin PIAT wrote: > On Wed, 2009-06-10 at 19:57 -0400, Mag Gam wrote: >> We have many users at my university engineering lab. Some professors >> nee

Re: sudo logging

2009-06-10 Thread Frank Lin PIAT
On Wed, 2009-06-10 at 19:57 -0400, Mag Gam wrote: > We have many users at my university engineering lab. Some professors > need commands for root and of other users, so we decided to setup sudo > permissions. I was wondering if there is a way to log all commands > when they sudo into an account or

Re: sudo logging

2009-06-10 Thread Steve Reilly
Steve Reilly wrote: > Mag Gam wrote: >> We have many users at my university engineering lab. Some professors >> need commands for root and of other users, so we decided to setup sudo >> permissions. I was wondering if there is a way to log all commands >> when they sudo into an account or root acco

Re: sudo logging

2009-06-10 Thread Steve Reilly
Mag Gam wrote: > We have many users at my university engineering lab. Some professors > need commands for root and of other users, so we decided to setup sudo > permissions. I was wondering if there is a way to log all commands > when they sudo into an account or root account. > > I would like to

sudo logging

2009-06-10 Thread Mag Gam
We have many users at my university engineering lab. Some professors need commands for root and of other users, so we decided to setup sudo permissions. I was wondering if there is a way to log all commands when they sudo into an account or root account. I would like to even capture key strokes...