[sudo-users] sudoers question: ALL - but restrict su -
Ladner, Eric (Eric.Ladner)
Eric.Ladner at chevron.com
Thu May 29 19:12:46 EDT 2008
don't forget to restrict "sudo vi /etc/sudoers" ;)
Chevron Products Company
From: sudo-users-bounces at courtesan.com
[mailto:sudo-users-bounces at courtesan.com] On Behalf Of
dave.parson at daimler.com
Sent: Thursday, May 29, 2008 4:50 PM
To: sudo-users at sudo.ws
Subject: [sudo-users] sudoers question: ALL - but restrict su -
I know this has been discussed before, but there seems to be more than
way to configure this - I would like to be a secure as possible.
Problem: Allow a user ALL commands, but "not" allow a root shell
later on don't allow vi as well). So commands like "su root" "su -"
whould not be allowed, but all other commands would.
Perhaps there is a better way than how I am trying to implement this ?.
If you are not the intended addressee, please inform us immediately that
you have received this e-mail in error, and delete it. We thank you for
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
More information about the sudo-users