Audit ALL Sudo users and show the users UID( ) not root's UID (0)
by fat01 from LinuxQuestions.org on (#5929N)
I'm trying to log ALL users activities using su/sudo's but the logs show UID (0) root, I want to see the actual UID of the user and not Root.
I've tried the Auditctl service and I've search for PAM howto about this with no success. Now I'm trying Sudoreplay.
If everyone has a recommendation or fix that would be great.


I've tried the Auditctl service and I've search for PAM howto about this with no success. Now I'm trying Sudoreplay.
If everyone has a recommendation or fix that would be great.