The ability to restrict what commands a user may run on a per-host basis.
Sudo does copious logging of each command, providing a clear audit trail of who did what. When used in tandem with syslogd, the system log daemon, Sudo can log all commands to a central host (as well as on the local host). At CU, all admins use Sudo in lieu of a
- The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
- Sudo now uses a workaround for a locale bug on Solaris 11.0 that prevents setuid programs like sudo from fully using locales.
- User messages are now always displayed in the user's locale, even when the same message is being logged or mailed in a different locale.
- Log files