[sudo-users] su except root

Thornton, Don Don.Thornton at stvin.org
Mon Jul 6 12:19:45 EDT 2009


Add the folling lines (visudo) to your /etc/sudoers file: 

User_Alias  NON_ROOT = APistocc, DThornto

Cmnd_Alias  SU_TO_ROOT = /usr/bin/su, /usr/bin/su -, /usr/bin/su root,
/usr/bin/su - root

NON_ROOT    ALL=(ALL) ALL, !SU_TO_ROOT



Don Thornton Jr.
The Unix System Administrator
St. Vincent Regional Medical Center
455 St. Michaels Dr.
Santa Fe, NM 87505
Wrk: 505-913-4875
Fax: 505-913-4957



On 10/5/06, ANDREW PISTOCCHI <APISTOCCHI at ut.edu> wrote:
>
> I have users able to su - as another user using sudo but how can I
> exclude them from root?  I want them to be able to sudo su as any user
> except root.  Right now if they type: sudo su and hit <Enter> they get
> the root # prompt.  I don't want this.
>
>
>
> Is there an easy way to allow them to su to all users except root?
>
>
>
> Andy Pistocchi
>
> apistocch at ut.edu
>
> 813-258-7422
>
> The University of Tampa
>
> ____________________________________________________________
> sudo-users mailing list <sudo-users at sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users
>



More information about the sudo-users mailing list