diff options
| -rw-r--r-- | debian/vyos-1x.install | 1 | ||||
| -rw-r--r-- | src/etc/rsyslog.d/sudo.conf | 9 |
2 files changed, 10 insertions, 0 deletions
diff --git a/debian/vyos-1x.install b/debian/vyos-1x.install index eb19dafeb..d8388eecc 100644 --- a/debian/vyos-1x.install +++ b/debian/vyos-1x.install @@ -1,5 +1,6 @@ etc/dhcp etc/init.d +etc/rsyslog.d etc/systemd etc/vyos lib/ diff --git a/src/etc/rsyslog.d/sudo.conf b/src/etc/rsyslog.d/sudo.conf new file mode 100644 index 000000000..589651f87 --- /dev/null +++ b/src/etc/rsyslog.d/sudo.conf @@ -0,0 +1,9 @@ +# Isolating sudo messages from syslog +# +# https://debian-administration.org/article/676/Isolating_sudo_messages_from_syslog + +# match if "program name" is equal to "sudo" +:programname, isequal, "sudo" -/var/log/auth.log + +# if we matched this causes the input to be swallowed, preventing further logging. +& ~ |