sudo command function
With the sudo command, we can classify certain superuser privileges into specific (fine) authorization to the specified ordinary user, and the normal user does not need to know the root password to use the obtained authorization (the administrator really allows root privileges). Therefore, it is no exaggeration to say that the sudo command, in contrast to the SU command, in the system users of decentralized management progress a lot, so that centralized management in theory to be guaranteed, so that the security aspects of the system to strengthen a lot.
sudo usage principle
3. File configuration
Execute the visudo command to edit the/etc/sudoers file
4.sudo authorization aliases and configuration relationships
5.sudo cooperate with Rsyslog service for log audit
[Email protected] ~]# echo "Defaults logfile=/var/log/sudo.log" >>/etc/sudoers
[Email protected] ~]# tail-1/etc/sudoers
Defaults Logfile=/var/log/sudo.log
- Log Centralized Management
Rsync+inotify or timed task +rsync, pushed to the log Management Server.
Linux sudo rights Management
