Extending Unix Command Control with Sudo 1.8

Sudo is used by millions of Linux/Unix users to delegate access to users to run Unix commands as root or another privileged user. Come listen to the Sudo Project Maintainer, Todd Miller, talk about relevance of Sudo in environments seeking to adhere to modern access control requirements. Todd will introduce the next major release of Sudo, and highlight important new “pluggablity” features that allows developers to add policy check, and keystroke logging functionality to Sudo 1.8. Also, learn from a real-world case study where developers from Quest Software have written Sudo 1.8 Plugins to allow Sudo 1.8 users to access important management and auditing functionality from a free version of their commercial product. Outline: 1) Brief Introduction to and history Sudo – There are very Linux/Unix sysadmins that haven’t used Sudo, but very few people know the history, the development philosophy, or the person (Todd Miller) that makes Sudo possible. A short introduction would be interesting to most Scale 9 attendees. 2) Help Sysadmins know what problems Sudo solves and how to interpret anti-sudo FUD from commercial software vendors. 3) Introduce new “pluggability” features of Sudo 1.8. Why make it pluggable? Did you break the Sudo sysadmins already know and love? Are there new setup and config changes? How does it work? 4) Overview the Sudo API which allows developers to write policy check and keystroke log plugins. Todd will spend a lot of time on the command line. Walk through configuration files, API header files, and show a bit of sample code. 5) Real-world interop case study – Present how Quest Software has developed Sudo 1.8 plugins that provide new Unix Command Control functionality for to enterprise Unix/Linux users