diff options
| author | Christian Poessinger <christian@poessinger.com> | 2020-03-01 10:09:45 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2020-03-01 10:10:26 +0100 |
| commit | 9e5933f4a49b4a85e19c964569415af24cdf0e8f (patch) | |
| tree | fcdf07640ae0c6c418ebc9b038570c912d21a6c1 /src/etc | |
| parent | f1505962107f881eaf3eb41ebd99ecb4abcbc1d4 (diff) | |
| download | vyos-1x-9e5933f4a49b4a85e19c964569415af24cdf0e8f.tar.gz vyos-1x-9e5933f4a49b4a85e19c964569415af24cdf0e8f.zip | |
syslog: T2086: move sudo session open/close log entries to auth.log
Diffstat (limited to 'src/etc')
| -rw-r--r-- | src/etc/rsyslog.d/sudo.conf | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/etc/rsyslog.d/sudo.conf b/src/etc/rsyslog.d/sudo.conf new file mode 100644 index 000000000..589651f87 --- /dev/null +++ b/src/etc/rsyslog.d/sudo.conf @@ -0,0 +1,9 @@ +# Isolating sudo messages from syslog +# +# https://debian-administration.org/article/676/Isolating_sudo_messages_from_syslog + +# match if "program name" is equal to "sudo" +:programname, isequal, "sudo" -/var/log/auth.log + +# if we matched this causes the input to be swallowed, preventing further logging. +& ~ |