Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to monitor all the commands when a user calls sudo bash, including the rest of the commands.

share|improve this question

1 Answer 1

Since version 1.7(ish?) sudo has an inbuilt logging feature.
In your sudoers file add:

User_Alias SHELL_USERS = root,user2 
Defaults:SHELL_USERS log_output 

Or for group based logging

Defaults:%shellusers log_output

Once a user uses sudo, everything they see will be captured and can be viewed in real time. Doesn't work so well when ncurses is involved.

http://www.gratisoft.us/sudo/sudoreplay.man.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.