any way to track commands of a user logged in through ssh 2296

Jeremiah DeWitt Weiner

Hi; I just ran (for ex;) as a regular User; ~$ sudo hdparm -idev-hdc

Right After that, within the same Shell (Bash) - I ran ~$ su -

I was immediately prompted for (root) pbuttword

Since I have myetc-sudoers file setup to Allow this User to run Sudo and NOT be prompted with a pbuttwd every single time, I *think* I am only enabling 'sudo' to complete *that one command instance only* (?). Now, I realize the drawback of this is that ANYONE can just type-prefix the command they want to run with 'sudo', and they can run *that* command only (and one small rm -rf command is plenty too much already:-8), Nobody but I, has physical access to the Box -- so am I to buttume that's an "Ok" way of using sudo?

BTW - Debian 3.1r2 (Kernel 2.6.8-3-686) - and here's myetc-sudoers contents;

~$ catetc-sudoers cat:etc-sudoers: Permission denied

whoops! ;-)

~$ sudo catetc-sudoers #etc-sudoers # # This file MUST be edited with the 'visudo' command as root. # # See the man page for details on how to write a sudoers file. #

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification root ALL=(ALL) ALL username ALL= NOPbuttWD: ALL

Regards