[sudo-users] Disable sudo -i

Todd C. Miller Todd.Miller at courtesan.com
Tue Apr 3 13:09:13 EDT 2012

On Tue, 03 Apr 2012 11:17:58 +0530, Gurveer Singh wrote:

> Does anyone know, how to disable sudo -i.
> Because i gave sudo ALL permission to a user and Now user is able to get
> root prompt using " *sudo -i* ".

"sudo -i" is really just shorthand for running a shell--it doesn't
allow the user to do anything that is not permitted by sudoers.

If you don't want people to be able to run a shell, you should not
give them access to sudo ALL.

 - todd

More information about the sudo-users mailing list