No subject

Fri Sep 28 08:36:56 EDT 2012

           bill        ALL = ALL, !SU, !SHELLS

       Doesn't really prevent bill from running the commands
       listed in SU or SHELLS since he can simply copy those
       commands to a different name, or use a shell escape from
       an editor or other program.  Therefore, these kind of
       restrictions should be considered advisory at best (and
       reinforced by policy).

 - todd

More information about the sudo-users mailing list