[sudo-users] restrict sudo access on certain files

[Matthew Hannigan]

On Fri, Mar 03, 2006 at 09:18:53AM -0500, Gerrath wrote:
> I have a server running for development purposes and I need to allow several
> developers (admins) almost complete admin rights but I want to restrict them
> from accessing a handful of files and 1 or two directories.  How can I
> easily set up the sudo accounts to have full access to everything with the
> exception of a couple of files and directories?

I suspect you're better off just running unrestricted sudo.

Run auditing of some sort (e.g. bsm on solaris) and say, tripwire,
so you can figure out who/when somebody changed something they
shouldn't have.


Matt