Live data from Hacker News

Remove “This incident will be reported.” from user warnings

github.com

11–20 of 302 posts

Re: Remove “This incident will be reported.” from user warnings

#13

For those wondering where the reports go, under systemd-based linux distributions ideally you can get them with this: sudo journalctl /bin/sudo Historically speaking however the sysadmin with access to the 'mail' command would be able to run that and see mail delivered to root@localhost for these reports. I think at least OpenBSD still does things this way [1], but they moved away from sudo YEARS ago now [2] [1] http…

Or you set up your system so mail for root gets redirected to an smtp server with an actual inbox read by actual people

Re: Remove “This incident will be reported.” from user warnings

#14
post #12

I was always disappointed it never summoned some grumpy graybeard unix admin from a dark server room basement to give me a chiding lecture.

Just because we’ve never seen him doesn’t mean he hasn’t at some point quietly summoned a curse on us

Re: Remove “This incident will be reported.” from user warnings

#18

For those wondering where the reports go, under systemd-based linux distributions ideally you can get them with this: sudo journalctl /bin/sudo Historically speaking however the sysadmin with access to the 'mail' command would be able to run that and see mail delivered to root@localhost for these reports. I think at least OpenBSD still does things this way [1], but they moved away from sudo YEARS ago now [2] [1] http…

Or you set up your system so mail for root gets redirected to an smtp server with an actual inbox read by actual people

Yeah, I kind of lament them removing this warning if I'm going to be honest. It feels like something such as that should be more common best practice.

Of course decent log collection/monitoring should also be able to catch authlog stuff and alert accordingly and I'm sure most organizations rely on solutions like that instead of letting things get lost in email

Post reply on HN