Skip to content

Sudo logging should also check the sudoers.d directory #27

@nathanielcutajar

Description

@nathanielcutajar

Currently the script only checks the sudoers file but in the file itself it states:

Please consider adding local content in /etc/sudoers.d/ instead of

directly modifying this file.

This means that we should instead create our our separate file with the following:
sudo nano /etc/sudoers.d/logging
Inside the file you'd write:
Defaults logfile=/var/log/sudo.log
Defaults log_input, log_output
sudo chmod 440 /etc/sudoers.d/logging

The script should check the sudoers.d directory and if need be go through all files in there and search for 'Defaults logfile'

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions