sudosh

I recently had the opportunity to review sudosh, a versatile software offering that has quickly become a go-to choice for many IT professionals. Sudosh is designed to provide an added layer of security, by operating as either a default login shell or a filter that can be placed between the user's keyboard and a program - in this case a shell. The software was created specifically to complement the functionality of sudo and allows for the execution of either a root or application shell with logging.

Through sudosh, administrators can record root shell sessions and even playback the recordings exactly as they were captured. Input/output, keyboard usage and timing data are all logged, ensuring that sessions can easily be reproduced and analyzed. What's more, thanks to its customizable audit reporting tools, sudosh is also an ideal option for businesses looking to maintain compliance with industry regulations such as Sarbanes-Oxley.

The updated version of sudosh is packed with features including ITIL best practices, enterprise-level audit reporting tools, customizable audit reports via CSS and embedded transactional SQL92 relational database. Load balancing and disaster recovery, SSL encryption and PKI authentication are additional highlights of the software. Sudosh also supports audit logs that are digitally signed for integrity and provides client and server configuration files that facilitate easy management.

Other features worth mentioning include configurable default shells, idle session timeout and the ability to display corporate policy information prior to each session. Overall, I highly recommend sudosh for any organization looking to step up its security and compliance efforts.