[sudo-users] running root shell

[David Thiel]

On Fri, Nov 18, 2005 at 05:53:31PM +0200, Kenan Erdey wrote:
> when configuring sudoers file, i give a user root access except shells. but 
> if he tries to copy his shell to a different named file he can be root by 
> running this file. how can i block  this ? 

You can't. Sudo only works effectively when the policy is default deny,
explicitly allowing certain tasks to be run as root.