[ibic]

As it happens - "The warning was restored in a slightly altered form in 9757d29" ( https://github.com/sudo-project/sudo/commit/9757d29a24ac1872... ) - Millert.

[usr1106]

That makes senses. I already wanted to comment that showing an false warning is not good. But silently sending a mail of what you tried to do is worse.

[dan_linder]

This is great! Now when I break into a system I can quickly verify if they've got this aspect of sudo logging setup or not!

Only 1/2 /s

[Dylan16807]

Checking if the alarm is set by seeing if it activates seems like it's not particularly useful.