Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to monitor all the commands when a user calls sudo bash, including the rest of the commands.

share|improve this question

Since version 1.7(ish?) sudo has an inbuilt logging feature.
In your sudoers file add:

User_Alias SHELL_USERS = root,user2 
Defaults:SHELL_USERS log_output 

Or for group based logging

Defaults:%shellusers log_output

Once a user uses sudo, everything they see will be captured and can be viewed in real time. Doesn't work so well when ncurses is involved.

http://www.gratisoft.us/sudo/sudoreplay.man.html

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .