Solved

Track sudo userids

Posted on 2013-05-24
3
372 Views
Last Modified: 2013-06-07
I am trying to see if there is a way to tell what user used sudo to do work on the server. I need to know if there is a log file that has the userid of the person who invoked sudo to make changes in the system.

Thanks
0
Comment
Question by:hsdoctor
3 Comments
 
LVL 19

Accepted Solution

by:
jools earned 134 total points
ID: 39194325
this is usually logged in /var/log/messages or perhaps /var/log/secure, depends on your distro.
0
 
LVL 19

Assisted Solution

by:simon3270
simon3270 earned 133 total points
ID: 39194685
or /var/log/auth.log (Ubuntu, Arch etc))
0
 
LVL 28

Assisted Solution

by:Jan Springer
Jan Springer earned 133 total points
ID: 39194737
You can also define the name of the file to which you wish to log transactions in /etc/sudoers.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Using 'screen' for session sharing, The Simple Edition Step 1: user starts session with command: screen Step 2: other user (logged in with same user account) connects with command: screen -x Done. Both users are connected to the same CLI sessio…
The purpose of this article is to demonstrate how we can use conditional statements using Python.
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now