Björn Persson said: > William Hooper wrote: > >> sudo doesn't have to be limited to "a few selected commands". >> Furthermore, using sudo provides you with an audit trail. > > Wouldn't it be rather difficult to construct a sudoers file so that a > user can do anything an administrator might possibly need to do but not > in any way manipulate the log? Sure, remote logging. Any log on the local machine is suspect, so if it is important set up remote logging. -- William Hooper
