Who are forbidden sudo requests reported to

sudosudoers

When I am forbidden to run sudo I get the following message:

barack.obama is not in the sudoers file. This incident will be reported.

But who is it reported to, and how?

Best Answer

It is reported to the user configured in the mailto directive in the sudoers file. This defaults to root. You can control what gets mailed and how verbose it is with the mail_* directives.