Download Safeguard for Sudo 7.2.0.2 Full Installer (.TAR.GZ)
ReturnSafeguard for Sudo helps Unix/Linux organizations take privileged account management through sudo to the next level: with a central policy server, centralized management of sudo and sudoers, centralized reporting on sudoers and elevated rights activities, event and keystroke logging of activities performed through sudo, and offline policy evaluation.With Safeguard for Sudo, One Identity provides a plugin to Sudo 1.8.1 (and later) to make administering sudo across a few, dozens, hundreds, or thousands of Unix/Linux servers easy, intuitive, and consistent. It eliminates the box-by-box management of sudo that is the source of so much inefficiency and inconsistency. In addition, the centralized approach delivers the ability to report on the change history of the sudoers policy file.
To ensure the integrity of your download, please verify the checksum value.
SHA256: 393d833690ae68478cbf10b75ed746f7ed73d7428ff17d5676afa55c9624c7e1
• You can load sudo-compatible approval and audit plugins, including plugins written in Python, on the policy server. For more information, see the following chapters in the Safeguard for Sudo Administration Guide:
• Supported sudo plugins
• Configuring a sudo approval plugin
• Configuring a sudo audit plugin.
• One Identity provides newer format rpm packages, which can be installed on RHEL 8 that is switched to FIPS compliant mode as well.
• You can manage policies using the Git workflow. The pmgit utility is a tool that can mediate version control operations between Subversion (SVN) and Git version control systems. For more information, see Managing policies in Git in the Administration Guide.
• You can stream event logs and keystroke (IO) logs from a client to a sudo log audit server (or compatible server) that implements the sudo logsrv protocol. This feature is disabled by default. Enable the recording service through configuring the policy server with pmsrvconfig or by editing pm.settings. For more information, see Audit server logging in the Administration Guide.
• New command line switch is added to the pmsrvinfo command. You can query from the server which client is using which sudoers policy.
