[sudo-users] sudo configuration
Russell Van Tassell
russell+sudo-users at loosenut.com
Tue Oct 7 19:15:25 EDT 2008
On Tue, Oct 07, 2008 at 01:51:56PM -0700, Jackson Afonso Krainer wrote:
> Hello everyone,
> What would be the best way to avoid an user from executing the following commands:
Start your sudo configuration from the point of enabling rather than
disabling... that is, when a command is identified where someone needs
sudo, add it to the config. Locking down privileges one by one is
almost ALWAYS a tougher way to go...
The toughest one most people will likely be familiar with is preventing
users from doing:
sudo su
And instead doing:
sudo <insert_command_here>
There are likely various good starting points/configs out there on the
web, too...
--
Russell M. Van Tassell
russell at loosenut.com
Slowly and surely the unix crept up on the Nintendo user ...
More information about the sudo-users
mailing list