[sudo-users] sudo configuration

Russell Van Tassell russell+sudo-users at loosenut.com
Tue Oct 7 19:15:25 EDT 2008

On Tue, Oct 07, 2008 at 01:51:56PM -0700, Jackson Afonso Krainer wrote:
> Hello everyone,
> What would be the best way to avoid an user from executing the following commands:

Start your sudo configuration from the point of enabling rather than
disabling... that is, when a command is identified where someone needs
sudo, add it to the config.  Locking down privileges one by one is
almost ALWAYS a tougher way to go...

The toughest one most people will likely be familiar with is preventing
users from doing:

	sudo su

And instead doing:

	sudo <insert_command_here>

There are likely various good starting points/configs out there on the
web, too...

Russell M. Van Tassell
russell at loosenut.com

Slowly and surely the unix crept up on the Nintendo user ...

More information about the sudo-users mailing list