Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-105167

sudoreplay session reminder for sudo-io log

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • rhel-8.10, rhel-9.6
    • sudo
    • No
    • Low
    • rhel-idm-sssd
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      sudoreplay replay session for sudo-io log which often cause customer  misunderstanding.

      Although sudoreplay has the following prompt after ending the session
      ~~~
      Replay finished, press any key to restore the terminal.
      ~~~

       

      However, when there are a lot of content to be replayed for one session, and there was a long wait in the replayed content, the interface window will remain on, which causes  customer to mistakenly believe that the replayed session has ended.

      For example, in the past,  the customer executed 'sudo su - ', after that there was no next action for a long time, so the sudoreplay replayed session would stay on the following interface for a long time, which caused many customers to mistakenly believe that the replayed session had ended

      ~~~
      [root@ruo-rhel8 ~]#  sudoreplay -s 5 /var/log/sudo-io/00/00/0Z
      Replaying sudo session: /bin/su -
      [root@ruo-rhel8 ~]#                   <------------- no any action for long time caused mistakenly believe replayed session had ended
      ~~~
      The above is just a simple example. In reality, there may be a lot of stagnant actions in sudo. each time there is a stagnant action then reply will also stagnant, it will cause misunderstanding.

       
      Can we optimize our 'sudoreplay' function? for example, directly display a message like "sudoreplay session" at the beginning of the window after sudoreplay is started. This will make it more clearer that the current loading replay session is clear, even if the session stays in the interface without any action for a long time.
       

              rh-ee-allopez Alejandro Lopez
              yruo1@redhat.com Yu Ruo
              Alejandro Lopez Alejandro Lopez
              SSG Security QE SSG Security QE
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: