Timeline for Tracking what commands were executed after sudo to another user
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 30, 2023 at 18:21 | answer | added | ron | timeline score: 0 | |
| Apr 26, 2019 at 7:18 | answer | added | Sankar | timeline score: 0 | |
| S Sep 27, 2012 at 8:45 | history | suggested | ire_and_curses | CC BY-SA 3.0 |
grammar, formatting
|
| Sep 27, 2012 at 6:41 | review | Suggested edits | |||
| S Sep 27, 2012 at 8:45 | |||||
| Sep 26, 2012 at 23:17 | answer | added | cas | timeline score: 6 | |
| Sep 26, 2012 at 23:15 | comment | added | dubiousjim | I was imagining a shell session would just determine at the beginning who the original user was. But yes, there would be a race condition if two users sudoed a new shell right at the same time. The thread I linked to discusses another way to determine who the original user was. | |
| Sep 26, 2012 at 23:08 | history | edited | Gilles 'SO- stop being evil' |
edited tags
|
|
| Sep 26, 2012 at 21:15 | comment | added | Venom | There could be flaw too. Consider 2 user logged in sametime and they become nzsup user and start exectuing some command.how to find which user executed which command after sudoed to nzsup.all the command executed will be in history file of nzsup only. | |
| Sep 26, 2012 at 21:01 | comment | added | dubiousjim | That's right, if one uses sudo to open a new shell, actions performed in the shell aren't logged. If there's a way to log them, I don't expect it will be through sudo. And I've never heard of any way to do such logging which aren't "voluntary" (that is, that the user couldn't override). For "voluntary" logging, you could write a script that grabs the latest line from /var/log/secure when a shell starts, and combines that with normal shell history. Or see unix.stackexchange.com/questions/6554/… | |
| Sep 26, 2012 at 20:32 | review | First posts | |||
| Sep 27, 2012 at 11:44 | |||||
| Sep 26, 2012 at 20:30 | history | asked | Venom | CC BY-SA 3.0 |