We have a requirement for multiple root accounts on a variety of
unixes.  This is more
for logging than security.

First solution was to just make multiple root accounts but due to the
way accounting
can't differentiate between multiple accounts with UID of 0, that wont
work.

Because we want unrestricted access, we're having problems with sudo.
root users
just get a shell and that initial line is the only one logged. The
technical solution
would be to train them to 'sudo somecommand'   where somecommand or
its
parent directory is listed in sudoers but this has been found to be
too cumbersome.

Anyone have a solution?
Thanks

[ Post a follow-up to this message ]