OS Manuals

/usr/bin/sudo_sendlog

Give certain users the ability to run some commands as root

From sudo 1.9.17_p2-r12 (os), captured 2026-11-05 by running sudo_sendlog --help (exit 0). permalink

sudo_sendlog: /etc/sudo.conf is owned by uid 1100, should be 0
sudo_sendlog - send sudo I/O log to remote server

usage: sudo_sendlog [-AnV] [-h host] [-i iolog-id] [-p port] [-r restart-point] [-R reject-reason] [-s stop-point] [-t number] /path/to/iolog

Options:
      --help            display help message and exit
  -A, --accept          only send an accept event (no I/O)
  -h, --host            host to send logs to
  -i, --iolog_id        remote ID of I/O log to be resumed
  -p, --port            port to use when connecting to host
  -r, --restart         restart previous I/O log transfer
  -R, --reject          reject the command with the given reason
  -s, --stop-after        stop transfer after reaching this time
  -t, --test            test audit server by sending selected I/O log n times in parallel
  -V, --version         display version information and exit
Options (14)
OptionDescriptionSource
--helpDisplay a short help message to the standard output and exit.help + man
-A, --accept, --accept-onlyOnly send the accept event, not the I/O associated with the log.help + man
-h, --hostConnect to the specified host instead of localhost.help + man
-i, --iolog_id, --iolog-idUse the specified iolog-id when restarting a log transfer.help + man
-p, --portUse the specified network port when connecting to the log server instead of the default, port 30344.help + man
-r, --restartRestart an interrupted connection to the log server.help + man
-R, --rejectSend a reject event for the command using the specified reject-reason, even though it was actually accepted locally.help + man
-s, --stop-afterStop sending log records and close the connection when stop-point is reached.help + man
-t, --testOpen number simultaneous connections to the log server and send the specified I/O log file on each one.help + man
-V, --versionPrint the sudo_sendlog version and exit.help + man
-b, --ca-bundleThe path to a certificate authority bundle file, in PEM format, to use instead of the system's default certificate authority database when authenticating the log server. (in the manual page but not in --help)man
-c, --certThe path to the client's certificate file in PEM format. (in the manual page but not in --help)man
-k, --keyThe path to the client's private key file in PEM format. (in the manual page but not in --help)man
-n, --no-verifyIf specified, the server's certificate will not be verified during the TLS handshake. (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.