Sudo even more secure

[Scott James Remnant]

On Wed, 2006-03-22 at 13:04 -0500, Dana Olson wrote:

> On Wed, 2006-03-22 at 18:45 +0100, Étienne Bersac wrote:
> > Hello
> > 
> > > There was a mention on slashdot a couple days ago talking about how  
> > > "sudo -s" doesn't get logged at all and provides you with a nice  
> > > root shell on OSX.
> > >
> > > Anyone here able to take a few minutes and check how this functions  
> > > under ubuntu?
> > I often use this feature. It's quite like type su and the root  
> > password under debian. But there you type your own password.
> > 
> > Étienne.
> > 
> 
> You can use "sudo su" on Ubuntu as well. I choose this method because it
> retains the current directory, and I'm too lazy to use cd again. :)
> 
> I have no idea about logging stuff.
> 
In /var/log/auth.log every time "sudo -s" or "sudo -i" is run:

Mar 23 16:34:32 quest sudo:    scott : TTY=pts/3 ; PWD=/home/scott ;
USER=root ; COMMAND=/bin/zsh

Scott
-- 
Scott James Remnant
scott at ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20060323/02c8a5cc/attachment.pgp