Somewhat OT: Is Full Command Logging Possible?

[Kurt Buff]

On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk <tundra at tundraware.com> wrote:
> I am working with an institution that today provides limited privilege
> escalation
> on their servers via very specific sudo rules.  The problem is that the
> administrators can do 'sudo su -'.
<snip>


sudo is misconfigured.

man 5 sudoers and man 8 visudo



Kurt