Hi,
good point, but this is not entirely true.
In the case where a user simply does a
sudo su -
or a
sudo sh
only the first command will be logged.
just a note in case you strictly rely on sudo's loggin capabilities to see
what user does what on a network. :)
On Wednesday 14 May 2003 17:57, lemuel typhair wrote:
going back to root means that you do not know who did what. sudo gets
logged, so you know who did what. that is way more important security
wise than not running sudo and having 5 people use root wih no logging.
the second hing is that if you did wan to limit people to certain
commands you can. with out it you are forced to give them rot, and that
means unlimited power.