Bugzilla – Bug 1046
TSID in syslog isn't complete value
Last modified: 2023-06-27 17:27:13 MDT
After adding "Defaults log_output" to the sudoers file, the TSID value in syslog is only two characters instead of six. root@nuc-1:/var/log# grep TSID auth.log Mar 31 13:34:26 nuc-1 sudo: illie : TTY=pts/3 ; PWD=/root ; USER=root ; TSID=01 ; COMMAND=/bin/bash root@nuc-1:/var/log# sudoreplay 01 sudoreplay: /var/log/sudo-io/01: No such file or directory root@nuc-1:/var/log# sudoreplay -l Mar 31 13:34:26 2023 : illie : HOST=nuc-1 ; TTY=/dev/pts/3 ; CWD=/home/illie ; USER=root ; TSID=00/00/01 ; COMMAND=/bin/bash root@nuc-1:/var/log# This works as expected in 1.8.31p1 but is broken in 1.9.x (tested both 1.9.9 and 1.9.13p3)
Thanks for the report, this is fixed by https://www.sudo.ws/repos/sudo/rev/f272de885273
Fixed in sudo 1.9.14.