[sudo-users] sudoers question: ALL - but restrict su -

Ladner, Eric (Eric.Ladner) Eric.Ladner at chevron.com
Thu May 29 19:12:46 EDT 2008

don't forget to restrict "sudo vi /etc/sudoers"  ;) 

Eric Ladner
Systems Analyst
Chevron Products Company

-----Original Message-----
From: sudo-users-bounces at courtesan.com
[mailto:sudo-users-bounces at courtesan.com] On Behalf Of
dave.parson at daimler.com
Sent: Thursday, May 29, 2008 4:50 PM
To: sudo-users at sudo.ws
Subject: [sudo-users] sudoers question: ALL - but restrict su -

I know this has been discussed before, but there seems to be more than
way to configure this - I would like to be a secure as possible.

Problem:  Allow a user ALL commands, but "not" allow a root shell
later on don't allow vi as well).  So commands like "su root" "su -"
whould not be allowed, but all other commands would.

Perhaps there is a better way than how I am trying to implement this ?.


If you are not the intended addressee, please inform us immediately that
you have received this e-mail in error, and delete it. We thank you for
your cooperation.  
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:

More information about the sudo-users mailing list