Results 1 to 2 of 2

Thread: Report of sudo usage

  1. #1
    Join Date
    Apr 2007
    Location
    Moscow, Russia
    Beans
    45
    Distro
    Ubuntu 10.04 Lucid Lynx

    Report of sudo usage

    How can i make my ubuntu server (with no enabled root account) to report of sudo usage via e-mail?
    For example, in CentOS installation i use
    Code:
    echo 'ALERT - Root Shell Access:' `who` | mail -s "Alert: Root Access from `who | awk '{print $6}'`" mymail@mymailserver.com
    in root .bash_profile to report of root login.

  2. #2
    Join Date
    Jan 2005
    Location
    Miami, FL
    Beans
    Hidden!
    Distro
    Ubuntu 11.04 Natty Narwhal

    Re: Report of sudo usage

    Perhaps install the logcheck program and remove the /etc/logcheck/violations.ignore.d/logcheck-sudo file? That should email you anytime that someone uses sudo with what command they ran.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •