[sudo-users] How to restrict sudo users from changing root password

[Martin Schröder]

2009/6/5, Kohlmeier, Marylou <Marylou.Kohlmeier at canyons.edu>:
> http://linux.die.net/man/5/sudoers
>
>  pete           HPPA = /usr/bin/passwd [A-z]*, !/usr/bin/passwd root
>  The user pete is allowed to change anyone's password except for root on
>  the HPPA machines. Note that this assumes passwd(1) does not take
>  multiple usernames on the command line. (from page 10 of the above link)

ln /usr/bin/passwd /tmp/foo
sudo /tmp/foo root

Best
   Martin