Bug#1059924: should we actually ship sudo_logsrvd

2024-01-14 Thread Alexander Reichle-Schmehl
Hi! * Marc Haber [240103 19:12]: > (1) > remove sudo_logsrvd from the package with no replacement? Please no, I know at least one user: Me! > (2) > move sudo_logsrvd to its own package with proper systemd unit etc bla > foo That sounds like a good idea, given that it is not a very common use

Bug#1059924: should we actually ship sudo_logsrvd

2024-01-03 Thread Marc Haber
Package: sudo Version: 1.9.15p4-2 Severity: important Dear Team, it has recently come to my attention that the sudo package contains sudo_logsrvd, a daemon which can collect event and "I/O logs" from sudo. Judging from the SECURITY NOTES in sudo(8), this means logging the complete input and