Re: root group in solaris



On 9/19/06, Robin Landis <robin.landis@xxxxxxxx> wrote:
sudo -s opens a root level shell that can be used to issue multiple
commands. If running in a gui, the admin could even have more than one
shell open and use the root and non-root shells simultaneously for
appropriate commands. That's pretty simple and requires knowledge of only
the user's own password. The only command logged is the command to spawn
the shell, not the commands issued in that shell, unlike the audit trail
that could be kept if commands were issued separately prefixed with sudo.

One option that I've used to log these commands is sudosh
(http://sourceforge.net/projects/sudosh/). It acts as a login shell,
but logs all commands/keystrokes and allows easy playback/review of
them for auditing.

Keith Bucher