Allowing ssh login using Sudo In order to record all the commands executed by a engineer when doing a remote login via ssh to your server do the following: 1. Login to the Linux server using the root login. 2. Edit the /etc/sudoers file using visudo. After editing the contents of the file shoud be as follows: # sudoers file. # # This file MUST be edited with the 'visudo' command as root. # # See the sudoers man page for the details on how to write a sudoers file. # # Host alias specification # User alias specification # Cmnd alias specification Cmnd_Alias USR_BIN_CMDS = /usr/bin/telnet, /usr/bin/tail, /usr/bin/diff, /usr/bin/dig, /usr/bin/find, \ /usr/bin/head, /usr/bin/kill, /usr/bin/ldapsearch, /usr/bin/man, \ /usr/bin/updatedb, /usr/bin/wget, /usr/bin/du, /usr/bin/watch Cmnd_Alias SBIN_CMDS = /sbin/chkconfig, /sbin/fdisk, /sbin/fsck, /sbin/ifconfig Cmnd_Alias USR_SBIN_CMDS = /usr/sbin/crond Cmnd_Alias USR_LIB_CMDS = /usr/lib/rpm...
Comments
Post a Comment