[CentOS] Wheel and YUM!!

Plant, Dean dean.plant at roke.co.uk
Fri Jun 27 07:47:23 UTC 2008


Harry Sukumar wrote:
> Hi James,
> 
> Yes I tried to do this on another machine unfortunately this didn't
> work for me, good you raised this topic 
> 
> On the other machine I edited the visudo
> 
> User_Alias PROJECT = emma, paddy, sb
> PROJECT   ALL = !/usr/su, !/bin/su, !/usr/bin/passwd
> 

I see your trying to protect your users from becoming root. You do
realise that with that sudo configuration a user can still run "sudo
/bin/bash" or any of the other shells to gain root access.

Dean



More information about the CentOS mailing list