[sudo-users] Disable sudo -i

[Todd C. Miller]

On Tue, 03 Apr 2012 11:17:58 +0530, Gurveer Singh wrote:

> Does anyone know, how to disable sudo -i.
> Because i gave sudo ALL permission to a user and Now user is able to get
> root prompt using " *sudo -i* ".

"sudo -i" is really just shorthand for running a shell--it doesn't
allow the user to do anything that is not permitted by sudoers.

If you don't want people to be able to run a shell, you should not
give them access to sudo ALL.

 - todd