[sudo-users] running root shell

David Thiel lx at redundancy.redundancy.org
Sat Nov 19 16:59:28 EST 2005

On Fri, Nov 18, 2005 at 05:53:31PM +0200, Kenan Erdey wrote:
> when configuring sudoers file, i give a user root access except shells. but 
> if he tries to copy his shell to a different named file he can be root by 
> running this file. how can i block  this ? 

You can't. Sudo only works effectively when the policy is default deny,
explicitly allowing certain tasks to be run as root.

More information about the sudo-users mailing list