Solved

Track sudo userids

Posted on 2013-05-24
3
374 Views
Last Modified: 2013-06-07
I am trying to see if there is a way to tell what user used sudo to do work on the server. I need to know if there is a log file that has the userid of the person who invoked sudo to make changes in the system.

Thanks
0
Comment
Question by:hsdoctor
3 Comments
 
LVL 19

Accepted Solution

by:
jools earned 134 total points
ID: 39194325
this is usually logged in /var/log/messages or perhaps /var/log/secure, depends on your distro.
0
 
LVL 19

Assisted Solution

by:simon3270
simon3270 earned 133 total points
ID: 39194685
or /var/log/auth.log (Ubuntu, Arch etc))
0
 
LVL 28

Assisted Solution

by:Jan Springer
Jan Springer earned 133 total points
ID: 39194737
You can also define the name of the file to which you wish to log transactions in /etc/sudoers.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s 2016. Password authentication should be dead — or at least close to dying. But, unfortunately, it has not traversed Quagga stage yet. Using password authentication is like laundering hotel guest linens with a washboard — it’s Passé.
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question