Remove “This incident will be reported.” from user warnings (github.com)

Article summary

The sudo project has removed the warning message 'This incident will be reported' from user warnings. This change was made in a recent commit, but was later added back in a subsequent commit, only printing if mail is configured. The original message was intended to notify users that their actions would be logged, but some found it confusing or intimidating. The removal and re-addition of this message sparked a discussion about logging, security, and user experience.

Main themes

• sudo warning message
• logging and security
• user experience
• system administration
• security policy
• accountability and responsibility

What commenters say

• The removal of the warning message is a good change because it was confusing and intimidating to new users.
• The warning message should not have been removed because it serves as a reminder that actions are being logged and monitored.
• The message's removal may leak details about internal policy regarding reporting of incorrect sudoing attempts.
• The warning message is a relic of a bygone era and is no longer relevant in modern single-user systems.
• Some users appreciate the warning message as it encourages responsible behavior and accountability.
• The focus should be on implementing robust logging and monitoring systems rather than relying on warning messages.
• The removal of the message may have implications for security and auditing in certain environments.
• The warning message's removal is part of a larger trend towards removing administrative rights and reducing malware persistence on corporate laptops.