[sudo-users] sudoers question: ALL - but restrict su -

[Ladner, Eric (Eric.Ladner)]

don't forget to restrict "sudo vi /etc/sudoers"  ;) 


Eric Ladner
Systems Analyst
Chevron Products Company

-----Original Message-----
From: sudo-users-bounces at courtesan.com
[mailto:sudo-users-bounces at courtesan.com] On Behalf Of
dave.parson at daimler.com
Sent: Thursday, May 29, 2008 4:50 PM
To: sudo-users at sudo.ws
Subject: [sudo-users] sudoers question: ALL - but restrict su -

I know this has been discussed before, but there seems to be more than
one 
way to configure this - I would like to be a secure as possible.

Problem:  Allow a user ALL commands, but "not" allow a root shell
(perhaps 
later on don't allow vi as well).  So commands like "su root" "su -"
"su" 
whould not be allowed, but all other commands would.

Perhaps there is a better way than how I am trying to implement this ?.


David



If you are not the intended addressee, please inform us immediately that
you have received this e-mail in error, and delete it. We thank you for
your cooperation.  
____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users