[sudo-users] sudo configuration

Russell Van Tassell russell+sudo-users at loosenut.com
Tue Oct 7 19:15:25 EDT 2008


On Tue, Oct 07, 2008 at 01:51:56PM -0700, Jackson Afonso Krainer wrote:
> Hello everyone,
> What would be the best way to avoid an user from executing the following commands:

Start your sudo configuration from the point of enabling rather than
disabling... that is, when a command is identified where someone needs
sudo, add it to the config.  Locking down privileges one by one is
almost ALWAYS a tougher way to go...

The toughest one most people will likely be familiar with is preventing
users from doing:

	sudo su

And instead doing:

	sudo <insert_command_here>

There are likely various good starting points/configs out there on the
web, too...


-- 
Russell M. Van Tassell
russell at loosenut.com

Slowly and surely the unix crept up on the Nintendo user ...



More information about the sudo-users mailing list