Tracking Sudo Users UID

fat

New Member
Joined
Oct 13, 2020
Messages
1
Reaction score
0
Credits
13
Hello Everyone,


I'm trying to log ALL users activities using su/sudo's but the logs show UID (0) root, I want to see the actual UID of the user and not Root.


I've tried the Auditctl service and I've search for PAM howto about this with no success. Now I'm trying Sudoreplay.

If everyone has a recommendation or fix that would be great.
 


Hello fat!

Which logs you are used to find informations about so far? I can see such informations in my auth.log by user and command are performed. But you must filter these entries for a better overview.
 
Last edited:
  • Like
Reactions: fat

Members online


Latest posts

Top