https://community.hpe.com/t5/operating-system-hp-ux/sudo-and-rootsh-concerns/m-p/4679273#M731534 Hi All, I am trying to implement the rootsh to log the admins activities when accessing the root account. It seems to work pretty good (when the user simply executes: sudo rootsh)except 2 things:<BR /><BR />- when the audited user starts glance or similar tools the logfile size grows extermely quickly and I am afraid if such session will be left for overnight run it will overflow the fs, especialy if there are a couple of such sessions open wchich is possible. Is there a way to stop logging such outputs?<BR /><BR />- how to set the rootsh as the user's login shell? What i tried so far was just placing the "sudo rootsh" in the user's .profile but this could easily be removed.<BR /><BR /><BR /> Wed, 25 Aug 2010 07:27:27 GMT Aldis Black 2010-08-25T07:27:27Z https://community.hpe.com/t5/operating-system-hp-ux/sudo-and-rootsh-concerns/m-p/4679273#M731534 Hi All, I am trying to implement the rootsh to log the admins activities when accessing the root account. It seems to work pretty good (when the user simply executes: sudo rootsh)except 2 things:<BR /><BR />- when the audited user starts glance or similar tools the logfile size grows extermely quickly and I am afraid if such session will be left for overnight run it will overflow the fs, especialy if there are a couple of such sessions open wchich is possible. Is there a way to stop logging such outputs?<BR /><BR />- how to set the rootsh as the user's login shell? What i tried so far was just placing the "sudo rootsh" in the user's .profile but this could easily be removed.<BR /><BR /><BR /> Wed, 25 Aug 2010 07:27:27 GMT https://community.hpe.com/t5/operating-system-hp-ux/sudo-and-rootsh-concerns/m-p/4679273#M731534 Aldis Black 2010-08-25T07:27:27Z