протокол сервера журнала Sudo (Sudo log server protocol)
EVENT LOG VARIABLES
AcceptMessage, AlertMessage and RejectMessage classes contain an
array of InfoMessage that should contain information about the user
who submitted the command as well as information about the
execution environment of the command if it was accepted.
Some variables have a client, run, or submit prefix. These
prefixes are used to eliminate ambiguity for variables that could
apply to the client program, the user submitting the command, or
the command being run. Variables with a client prefix pertain to
the program performing the connection to the log server, for
example sudo. Variables with a run prefix pertain to the command
that the user requested be run. Variables with a submit prefix
pertain to the user submitting the request (the user running sudo).
The following InfoMessage entries are required:
Key Type Description
command string command that was submitted
runuser string name of user the command was run as
submithost string name of host the command was submitted
on
submituser string name of user submitting the command
The following InfoMessage entries are recognized, but not required:
Key Type Description
clientargv StringList client's original argument vector
clientpid int64 client's process ID
clientppid int64 client's parent process ID
clientsid int64 client's terminal session ID
columns int64 number of columns in the terminal
lines int64 number of lines in the terminal
runargv StringList argument vector of command to run
runchroot string root directory of command to run
runcwd string running command's working directory
runenv StringList the running command's environment
rungid int64 primary group-ID of the command
rungids NumberList supplementary group-IDs for the
command
rungroup string primary group name of the command
rungroups StringList supplementary group names for the
command
runuid int64 run user's user-ID
submitcwd string submit user's current working
directory
submitenv StringList the submit user's environment
submitgid int64 submit user's primary group-ID
submitgids NumberList submit user's supplementary group-IDs
submitgroup string submitting user's primary group name
submitgroups StringList submit user's supplementary group
names
submituid int64 submit user's user-ID
ttyname string the terminal the command was submitted
from
The server must accept other variables not listed above but may
ignore them.
