sudo and rootsh concerns

[Aldis Black]

Hi All, I am trying to implement the rootsh to log the admins activities when accessing the root account. It seems to work pretty good (when the user simply executes: sudo rootsh)except 2 things:

- when the audited user starts glance or similar tools the logfile size grows extermely quickly and I am afraid if such session will be left for overnight run it will overflow the fs, especialy if there are a couple of such sessions open wchich is possible. Is there a way to stop logging such outputs?

- how to set the rootsh as the user's login shell? What i tried so far was just placing the "sudo rootsh" in the user's .profile but this could easily be removed.