I'm a bit slow today so, please explain what are you trying to do exactly? OSSEC can monitor sudo usage, in fact there are a couple of basic rules for it.
On Wed, Jun 8, 2011 at 11:11 AM, Kat <[email protected]> wrote: > I have a group of users that I would like to monitor for sudo usage. I > have looked at the standard root sudo, but was wondering if anyone had > done any custom rules for this at all. Since it is about 50 users in > this group that I want to monitor, there has to be an easy way and I > am just not figuring it out. > > thanks > -k
