[sudo-users] Disable sudo -i
Todd C. Miller
Todd.Miller at courtesan.com
Tue Apr 3 13:09:13 EDT 2012
On Tue, 03 Apr 2012 11:17:58 +0530, Gurveer Singh wrote:
> Does anyone know, how to disable sudo -i.
> Because i gave sudo ALL permission to a user and Now user is able to get
> root prompt using " *sudo -i* ".
"sudo -i" is really just shorthand for running a shell--it doesn't
allow the user to do anything that is not permitted by sudoers.
If you don't want people to be able to run a shell, you should not
give them access to sudo ALL.
More information about the sudo-users