Bug 497

When the options LOG_INPUT and/or LOG_OUTPUT is used, to capture the output used sudo command, I noticed that the original userid has been reset to the effective userid and an additional pseudo terminal is created. 

We have individual history logging, so we can see, who has performed what under each account, because a lot of users are using the root account (or any other shared account).
So when we use the i/o logging within sudo, all history logging is placed into one file and messes-up the individual history logging greatly.

----------------------------------------------------------------
AN EXAMPLE:
NO use of LOG_INPUT and/or LOG_OUTPUT:
peterp@server(/home/peterp)$ who am i
peterp    pts/0       Jun  8 11:22     (thinkpad)
peterp@server(/home/peterp)$ sudo su -
Password:
root@server(/home/root)# whoami                 # <<< effective userid
root
root@server(/home/root)# who am i               # <<< Original userid
peterp    pts/0       Jun 08 11:22     (thinkpad)

root@server(/home/root)# cat /etc/sudoers |grep CMD_SUDO_ROOT
Cmnd_Alias     CMD_SUDO_ROOT = /usr/bin/su -
%rootgrp       ALL = (ALL) CMD_SUDO_ROOT
root@server(/home/root)#
----------------------------------------------------------------

----------------------------------------------------------------
An example, with the use of LOG_INPUT and/or LOG_OUTPUT:

peterp@server(/home/peterp)$ 
Connection to server closed.
peterp@thinkpad(/home/peterp)$ ssh server
peterp@server(/home/peterp)$ whoami
peterp
peterp@server(/home/peterp)$ sudo su -
Password:
root@server(/home/root)# whoami                 # <<< effective userid
root
root@server(/home/root)# who am i               # <<< Original userid
root      pts/1 
root@server(/home/root)# cat /etc/sudoers |grep CMD_SUDO_ROOT
Cmnd_Alias     CMD_SUDO_ROOT = /usr/bin/su -
%rootgrp       ALL = (ALL) LOG_INPUT: LOG_OUTPUT: CMD_SUDO_ROOT
root@server(/home/root)#
----------------------------------------------------------------