Somewhat OT: Is Full Command Logging Possible?

Kurt Buff kurt.buff at gmail.com
Wed Dec 5 23:44:11 UTC 2012


On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk <tundra at tundraware.com> wrote:
> I am working with an institution that today provides limited privilege
> escalation
> on their servers via very specific sudo rules.  The problem is that the
> administrators can do 'sudo su -'.
<snip>


sudo is misconfigured.

man 5 sudoers and man 8 visudo



Kurt


More information about the freebsd-questions mailing list