If a non-admin types a sudo command in Terminal, this will appear after they enter their password:
User is not in the sudoers file. This incident will be reported.
Where is this reported to?
The event will be logged in /var/log/secure.log and a mail will be sent to root (which by default goes to /dev/null which is Unix speak for it is discarded).
Sign up using Google
Sign up using Facebook
Sign up using Stack Exchange
By posting your answer, you agree to the
terms of service.
1 year ago