[sudo-workers] disable -s
wiki at gaydar.zp.ua
Mon Jun 9 10:36:25 EDT 2008
Sun, Jun 08, 2008 at 02:08:51PM -0400, Todd C. Miller wrote:
> In message <20080608113120.GA10522 at radiocom.net.ua>
> so spake Victor (wiki):
> > Sorry, I see that question on subj was some time ago.
> > But. Now I have situation that my users is the used commands as "sudo -
> > s -u root", and on
> > this not save logging information about enterred command.
> > Maybe we can add new option on source core for disable it?
> There's nothing magic about "sudo -s", it will only allow the user
> to run a shell if the sudoers file allows it. It is simply shorthand
> for "sudo $SHELL". If you don't want your users to be able to run
> a shell, their sudoers entries just have to reflect that.
Sorry, maybe we can show to me hint?
> - todd
More information about the sudo-workers