问轩博客

展开菜单

配置sudo日志审计

配置sudo日志审计
1.rpm -qa|egrep "sudo|rsyslog"2./etc/sudoersecho "Defaults logfile=/var/log/sudo.log" >> /etc/sudoerstail -1 /etc/sudoersvisudo -c如果是Centos6.4路径为/etc/rsyslog.conf(这里可以不配)echo "local2.debug /var/log/sudo.log&qu...