Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Track sudo userids

Posted on 2013-05-24
3
Medium Priority
?
381 Views
Last Modified: 2013-06-07
I am trying to see if there is a way to tell what user used sudo to do work on the server. I need to know if there is a log file that has the userid of the person who invoked sudo to make changes in the system.

Thanks
0
Comment
Question by:hsdoctor
3 Comments
 
LVL 19

Accepted Solution

by:
jools earned 536 total points
ID: 39194325
this is usually logged in /var/log/messages or perhaps /var/log/secure, depends on your distro.
0
 
LVL 20

Assisted Solution

by:simon3270
simon3270 earned 532 total points
ID: 39194685
or /var/log/auth.log (Ubuntu, Arch etc))
0
 
LVL 29

Assisted Solution

by:Jan Springer
Jan Springer earned 532 total points
ID: 39194737
You can also define the name of the file to which you wish to log transactions in /etc/sudoers.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
In the first part of this tutorial we will cover the prerequisites for installing SQL Server vNext on Linux.
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Suggested Courses
Course of the Month11 days, 19 hours left to enroll

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question