diff -up sudo-1.8.6p3/plugins/sudoers/sudoers.c.auditeditor sudo-1.8.6p3/plugins/sudoers/sudoers.c --- sudo-1.8.6p3/plugins/sudoers/sudoers.c.auditeditor 2012-09-24 16:16:07.577331344 +0200 +++ sudo-1.8.6p3/plugins/sudoers/sudoers.c 2012-09-24 16:30:16.738174293 +0200 @@ -709,7 +709,24 @@ sudoers_policy_main(int argc, char * con #endif /* HAVE_SELINUX */ /* Must audit before uid change. */ - audit_success(NewArgv); + if (ISSET(sudo_mode, MODE_EDIT)) { + /* + * Build a new argv, argc for the audit system + * so that the editor being invoked is visible + * in audit messages. + */ + char *editor = NULL; + char **editor_argv = NULL; + + editor = find_editor(NewArgc - 1, NewArgv + 1, &editor_argv); + + if (editor) { + audit_success(editor_argv); + efree(editor_argv); + } else + errorx(1, _("Can't find an editor")); + } else + audit_success(NewArgv); *command_infop = command_info;