Re: root group in solaris

On 9/19/06, Robin Landis <robin.landis@exim.gov> wrote:
> sudo -s opens a root level shell that can be used to issue multiple
> commands.  If running in a gui, the admin could even have more than one
> shell open and use the root and non-root shells simultaneously for
> appropriate commands.  That's pretty simple and requires knowledge of only
> the user's own password.  The only command logged is the command to spawn
> the shell, not the commands issued in that shell, unlike the audit trail
> that could be kept if commands were issued separately prefixed with sudo.

One option that I've used to log these commands is sudosh
(http://sourceforge.net/projects/sudosh/).  It acts as a login shell,
but logs all commands/keystrokes and allows easy playback/review of
them for auditing.

Keith Bucher