Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Where are unauthorized sudo attempts reported to?

When you attempt to use sudo, and are not allowed, a message says that the attempt will be reported.

Is this only reported in var/log/auth.log ? or is there another place? The reason I ask, is because the log contains so much that it's not a very good way of viewing often.

share|improve this question

1 Answer 1

up vote 4 down vote accepted

It is reported in that file in ubuntu. It quite easy to change that. Just add this line in your sudeers-file. Use sudo visudo

Defaults    logfile=/var/log/sudo.log 

You can change the file name to whatever you think is appropriate.

share|improve this answer
    
Thanks this helps accomplish what I was wanting. –  Frantumn Jan 23 '13 at 19:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.