<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Geng的小屋 &#187; sudo</title>
	<atom:link href="http://blog.yuwei.org/archives/tag/sudo/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.yuwei.org</link>
	<description>Powered by WordPress</description>
	<lastBuildDate>Fri, 08 Jul 2011 09:49:34 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>将sudo的日志记录到本地 远程</title>
		<link>http://blog.yuwei.org/archives/432</link>
		<comments>http://blog.yuwei.org/archives/432#comments</comments>
		<pubDate>Wed, 25 Nov 2009 14:36:32 +0000</pubDate>
		<dc:creator>Geng</dc:creator>
				<category><![CDATA[未分类]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[sudo]]></category>

		<guid isPermaLink="false">http://blog.yuwei.org/archives/432</guid>
		<description><![CDATA[老早之前配的了，刚忽然有人问，翻了半天，干脆转到这儿。 &#160; 先运行 touch /var/log/sudolog 去生成一个新的日志 在visudo里增加 Defaults loglinelen=0 Defaults logfile=/var/log/sudolog 在/etc/syslog.conf最下边增加 local2.debug /var/log/sudolog 重启syslog服务 service syslog restart 将sudo的日志记录到远端服务器 在visudo增加 Defaults loglinelen=0 Defaults syslog=local2 %qunarops ALL=(ALL) NOPASSWD: ALL,!/bin/su 在vi /etc/syslog.conf最下边增加 local2.* @192.168.0.119 重启syslog服务 service syslog restart 远端日志服务器配置 vi /etc/sysconfig/syslog SYSLOGD_OPTIONS=&#34;-r -m 0&#34; vi /etc/syslog.conf 增加 local2.* /var/log/sudolog 重启 syslog service syslog restart]]></description>
		<wfw:commentRss>http://blog.yuwei.org/archives/432/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

