27 Jun
2008
27 Jun
'08
7:47 a.m.
Harry Sukumar wrote:
Hi James,
Yes I tried to do this on another machine unfortunately this didn't work for me, good you raised this topic
On the other machine I edited the visudo
User_Alias PROJECT = emma, paddy, sb PROJECT ALL = !/usr/su, !/bin/su, !/usr/bin/passwd
I see your trying to protect your users from becoming root. You do realise that with that sudo configuration a user can still run "sudo /bin/bash" or any of the other shells to gain root access.
Dean