[sudo-users] sudo command deny

[Todd C. Miller]

On Sat, 06 Feb 2016 00:38:56 +0800, Zoltan Nagy wrote:

>   Hi. Sorry for my english, I want to deny in my knoppix the sudo -i
> command. I have a  friend who comes by and he think he is a super computer
> expert and allways modify my installed programs. It is very annoying and I
> hate to always reinstall and reconfigure the whole system. It is possible
> to prevent him to get the su or root authentication by simply typing in
> sudo -i ?

"sudo -i" is just a shorter way of running a shell.  If you don't
want the user to run a shell, don't give them sudo access to it.
Really, if you don't trust this friend not to mess up your system,
why give him sudo access at all?

 - todd