Disabling sudo logging very specific command

Disabling sudo logging very specific command

Amos Shapira amos.shapira at gmail.com
Thu Oct 1 02:45:41 IST 2009


Hello,

We have a script which runs in a loop and contains a command like:

    for ONE_USER in $USER_GROUP
    {
        sudo $BINDIR/getmail $ONE_USER $TOPDIR
    }

This script is executed by a non-root user and generates tons of
output in /var/log/secure (this is an old Fedora Core system,
eventually I'll get around to replace it with CentOS 5).

Is there a way to limit sudo NOT to log just this specific case - i.e.
only allow this user to execute $BINDIR/getmail with two parameters,
don't ask for a password but also don't log ONLY execution which was
permitted by this line?

The script also calls sudo with another specific command which I'd
like to do the same for.

So far I didn't find a way to do that.

Thanks,

--Amos



More information about the Linux-il mailing list