Tell me more ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.
up vote 10 down vote favorite

If a non-admin types a sudo command in Terminal, this will appear after they enter their password:

User is not in the sudoers file. This incident will be reported.

Where is this reported to?

share|improve this question
+1 I've wondered this too! – daviesgeek Nov 2 '11 at 22:09
5  
Mandatory xkcd reference: xkcd.com/838 – Javier Badia Nov 3 '11 at 9:55
It's always irritated me to no end that sudo is so crabby in responding to almost always perfectly innocent errors. – Reid Nov 9 '11 at 1:59
/var/spool/mail/<USERNAME> source: stackoverflow.com/questions/13546933/… – harple_darple Nov 25 '12 at 17:01

1 Answer

up vote 13 down vote accepted

The event will be logged in /var/log/secure.log and a mail will be sent to root (which by default goes to /dev/null which is Unix speak for it is discarded).

share|improve this answer
+1 Sending the mail shouldn't fail, but probably won't be read. It is possible to have it sent to a different user, but the chances of that modification are about the same as someone reading root's mail. – ughoavgfhw Nov 2 '11 at 22:08
I had a look at the log file in the mean time, mail to root goes to /dev/null. – patrix♦ Nov 2 '11 at 22:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.