From owner-freebsd-questions Thu Nov 18 10:19:57 1999 Delivered-To: freebsd-questions@freebsd.org Received: from www.cyfari.com (tc-wc-de-68-50 [63.70.68.50]) by hub.freebsd.org (Postfix) with SMTP id D251414D82 for ; Thu, 18 Nov 1999 10:19:43 -0800 (PST) (envelope-from naief@cyfari.com) Received: (qmail 4808 invoked from network); 18 Nov 1999 18:19:41 -0000 Received: from unknown (HELO naief.cyfari.com) (208.193.65.11) by www.cyfari.com with SMTP; 18 Nov 1999 18:19:41 -0000 Date: Thu, 18 Nov 1999 13:18:37 -0500 From: naief To: "mike.sellenschuetter" Cc: freebsd-questions@freebsd.org Subject: Re: Sudo Logging Message-ID: <19991118131837.A75054@cyfari.com> References: <0056440001134539000002L492*@MHS> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <0056440001134539000002L492*@MHS>; from mike.sellenschuetter@bankofamerica.com on Thu, Nov 18, 1999 at 12:25:00PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Nov 18, 1999 at 12:25:00PM -0500, mike.sellenschuetter wrote: > Thank you for your suggestion. I verified that the /var/log/sudo file did > exist, and I hupped the daemon again. I then tried a command with sudo. > Afterwards, I checked the /var/log/sudo file and it was empty, and a tail of > the /var/log/messages file revealed that logging was still being directed to > the messages file. Is their anything that I need to do to configure sudo? I am sorry Mike, my answer was wrong :-|, I should have read your message more carefully. My answer was a stock answer to a stock problem with syslogd, and that is not having the file to begin with. But you have to do this in syslog.conf !sudo *.* /var/log/sudo you see sudo is not a standard facility, that is why you have to do this. So, go ahead append this to the end of syslog.conf, hangup syslogd and have Fun!!! :-) Cheers, BBTG > > On Thu, Nov 18, 1999 at 10:18:42AM -0500, mike.sellenschuetter wrote: > > I am a learning system administrator for a FreeBSD based system at Bank of > > America, and I am having a problem getting sudo to log to a file other than > > /var/log/messages. In the /etc/syslog.conf file, I made the following entry: > > > > sudo.* /var/log/sudo > > > did you create the file? > touch /var/log/sudo > kill -HUP `cat /var/run/syslog.pid` > This should do it for you. > -- ------------------------------------------------------- Naief BinTalal | naief@cyfari.com ------------------------------------------------------- "A rock pile ceases to be a rock pile the moment a single man contemplates it, bearing within him the image of a cathedral" -- Antoine de Saint-Exupery ------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message