We eval'd sudosh as a replacement for our syslogging
bash and the fact that sudosh logs password made it
fail. We'd rather miss logging commands when people
shell-out of syslog-bash than log passwords.
I know there's portability concerns about this feature
and that it was rolled back, but it really is crucial
to the adoption of sudosh in our environment. If you
could make autoconf only include the feature on those
platforms that it worked on, then we could use sudosh
on those platforms.
lamont@scriptkiddie.org
Logged In: NO
I would like to second this. Having it record people
entering passwds make it impractical for us too.
Like to have it spot a "Password:" prompt, and not record
characters till after the next cr.
Logged In: NO
i am facing the same issue. I can't have passwords logged -
goes against the security policy.