Sunday, May 5, 2024
 Popular · Latest · Hot · Upcoming
12
rated 0 times [  12] [ 0]  / answers: 1 / hits: 7933  / 3 Years ago, sat, august 14, 2021, 5:34:53

Where are unauthorized sudo attempts reported to?



When you attempt to use sudo, and are not allowed, a message says that the attempt will be reported.



Is this only reported in /var/log/auth.log? Is there another place? The reason I ask, is because the log contains so much that it's not a very good way of viewing often.


More From » sudo

 Answers
6

It is reported in that file in ubuntu. It quite easy to change that. Just add this line in your /etc/sudoers file. Use sudo visudo to edit the file.



Defaults    logfile=/var/log/sudo.log 


You can change the file name to whatever you think is appropriate.


[#33054] Sunday, August 15, 2021, 3 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
lowovey

Total Points: 287
Total Questions: 98
Total Answers: 117

Location: Bosnia and Herzegovina
Member since Thu, Jan 14, 2021
3 Years ago
;