Page MenuHomeVyOS Platform

Move sudo session open/close log entries to auth.log
Closed, ResolvedPublicFEATURE REQUEST

Description

monitor log command is cluttered with log entries from sudo, it reads /var/log/messages.

To reduce the noise in this logfile split out the sudo log messages to /var/log/auth.log which was somehow designed for this logging traffic.

Mar  1 09:44:54 LR1 sudo: pam_unix(sudo:session): session opened for user root by cpo(uid=0)
Mar  1 09:44:54 LR1 sudo: pam_unix(sudo:session): session closed for user root
Mar  1 09:44:54 LR1 sudo: pam_unix(sudo:session): session opened for user root by cpo(uid=0)
Mar  1 09:44:54 LR1 sudo: pam_unix(sudo:session): session closed for user root

Details

Difficulty level
Easy (less than an hour)
Version
1.3-rolling-202002280217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Improvement (missing useful functionality)

Event Timeline

c-po changed the task status from Open to Backport candidate.Mar 1 2020, 8:53 AM
c-po claimed this task.
c-po created this task.
c-po changed Difficulty level from Unknown (require assessment) to Easy (less than an hour).
c-po changed Version from - to 1.3-rolling-202002280217.
c-po renamed this task from Move sudo log messages out of to Move sudo session open/close log entries to auth.log.Mar 1 2020, 9:10 AM
c-po moved this task from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus board.
c-po added a project: Ready for Crux (1.2.x).
c-po removed a project: Ready for Crux (1.2.x).
c-po moved this task from Backport Candidates to Finished on the VyOS 1.3 Equuleus board.
erkin set Issue type to Improvement (missing useful functionality).Aug 31 2021, 5:27 PM