-
-
Notifications
You must be signed in to change notification settings - Fork 274
Closed
Description
On Devuan GNU/Linux 5.0 (Daedalus) sudo (whether asking for password or not) logs wrong command end timestamp (doubles duration) to /var/log/sudo.log:
Sep 5 15:55:00 2024 : opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 with password && sleep 60'
Sep 5 15:57:00 2024 : opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 with password && sleep 60' ; EXIT=0
Sep 5 15:57:00 2024 : opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 without password && sleep 60'
Sep 5 15:59:00 2024 : opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 without password && sleep 60' ; EXIT=0
compared to /var/log/auth.log:
2024-09-05T15:55:00.188165+02:00 kiwi sudo 209981 - - opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 with password && sleep 60'
2024-09-05T15:56:00.195024+02:00 kiwi sudo 209981 - - opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 with password && sleep 60' ; EXIT=0
2024-09-05T15:57:00.218851+02:00 kiwi sudo 209987 - - opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 without password && sleep 60'
2024-09-05T15:58:00.229995+02:00 kiwi sudo 209987 - - opty : TTY=pts/12 ; PWD=/home/opty ; USER=root ; COMMAND=/bin/bash -c 'echo sleep 60 without password && sleep 60' ; EXIT=0
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels