On Tue, Jul 24, 2012 at 1:36 PM, m.roth@5-cent.us wrote:
Once a user has become root, they own the system. You really can't restrict > them at that point. If you don't want them doing some
things, perhaps su isn't the best solution.
Good point, Dave. Stephen - are you sure you don't want to give them sudo, with limits as to what commands they can run?
Or if the real issue is shared use of a machine with some conflicts of interest, giving different users or groups their own VM's might be a better solution than trying to play referee.