sudo setup

I am working on setting sudo on a few AIX servers and wanted to know how to give users root access without allowing them access to the sudo logs, sudoers files and the /etc/security directory.

When you are root you can do everything on the box. With AIX 6 this role based permission system will come - maybe you can do such things with that.

for the logs, you could redirect syslog for sudo to another server, where just you have access too

the rest is not possible, as zaxxon said

in the future, we will use Authentication Services from quest software, for the Active Direcotry Integration of AIX
the user data of course and the sudo configuration and can be stored in the active directory

but root is root :slight_smile:

You may want to look at the RBAC (Role Based Access Control) video here and see if that would better suit what you are trying to do:

IBM developerWorks: Wikis - AIX - Movies