Tracking Sudo Users UID

fat

New Member
Credits
13
Hello Everyone,


I'm trying to log ALL users activities using su/sudo's but the logs show UID (0) root, I want to see the actual UID of the user and not Root.


I've tried the Auditctl service and I've search for PAM howto about this with no success. Now I'm trying Sudoreplay.

If everyone has a recommendation or fix that would be great.
 


Robodoctor

New Member
Credits
37
Hello fat!

Which logs you are used to find informations about so far? I can see such informations in my auth.log by user and command are performed. But you must filter these entries for a better overview.
 
Last edited:
  • Like
Reactions: fat


Members online


Latest posts

Top