[sudo-users] running root shell
lx at redundancy.redundancy.org
Sat Nov 19 16:59:28 EST 2005
On Fri, Nov 18, 2005 at 05:53:31PM +0200, Kenan Erdey wrote:
> when configuring sudoers file, i give a user root access except shells. but
> if he tries to copy his shell to a different named file he can be root by
> running this file. how can i block this ?
You can't. Sudo only works effectively when the policy is default deny,
explicitly allowing certain tasks to be run as root.
More information about the sudo-users