[sudo-users] console users only

[Jayen Ashar]

pam_console.so appears to be a fedora thing, and looks like it's been 
removed, too. 
(http://fedoraproject.org/wiki/Releases/FeatureRemovePAMConsole)

What I'm trying to do is deploy a series of Ubuntu desktops, and give 
each user control of their own desktop, by way of tying sudoers with the 
console user.  Other than pam_console, or a pam module that alters 
sudoers, is there another way to do this?  Is there a proper way to do this?

Thanks,
Jayen

Todd C. Miller wrote:
> In message <49EFBAA5.8070502 at science.unsw.edu.au>
> 	so spake Jayen Ashar (jayen):
> 
>> Is it possible to make a sudoers to allow only console users to execute 
>> commands, like X?
> 
> No, sudo doesn't support restricting commands based on the tty the
> user is logged in to.
> 
> On Linux, you may wish to look into configuring pam_console.so
> via /etc/security/console.perms and /etc/security/console.apps/
> to see if that will meet your needs.
> 
>  - toid