sudo
Sudo Logging and Monitoring
For Debian based systems Basic Logging methods Log what sudo did (/var/log/auth.log) Debugging (/var/log/sudo_debug) Full session capture (/var/log/sudo-io) With these three you can customize the level of logging needed for your environment. VISUDO You should always use visudo to edit the /etc/