How to log sudoers

vi /root/.bashrc

myname=`who am i | awk '{print $1}'`
PROMPT_COMMAND='history -a >(logger -p local2.info -t "$myname $USER[$PWD] $SSH_CONNECTION")'

vi /etc/rsyslog.conf

$umask 0000 
$FileCreateMode 0666
local2.info /var/log/usercommands
$umask 0077

Leave a Reply

Your email address will not be published. Required fields are marked *