How to restrict users in SUDO?

[Mike_305]

Hi,

How do I specify in sudo to stop all the user from shell level to stop doing any commands, only 4 users should be able to do any root command and force this 4 users to use sudo. I am not sure if it's possible.

How would I configure this?

Thanks,

Mike

[A. Clay Stephenson]

Your question is not clear. Are you trying to prevent regular users from ever getting to a shell prompt? If so, sudo has nothing to do with the question. Are you trying to prevent a user from logging in as root? You need to describe the problem better.

[Marvin Strong]

Not really sure what you are looking for.

If your saying all your users are setup in sudo as ALL ALL then you need to read the sudo documentation it tells exactly how to restrict people.

[Jaime Bolanos Rojas.]

Mike, take a look at this thread, maybe you can find what you want overthere.

Also sudo is a very complete tool, for which the information on how to restrict users got to be read.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=87437&admit=-682735245+1154713773183+28353475

Regards,

jaime.

[Mike_305]

Hi,

OK, I am sorry for not being clear but this what I am trying to setup:

I have couple user that need setup in sudo file and I want them to force to user sudo. My understanding was that in order for me to monitor; they need to start the command with sudo (command name).

Also, I am trying to restrict some of them with certain root command.

This is what I have configured in sudo configuration file.

a124 ALL=(root) ALL --> (this means he can do any thing as root)
m5678 ALL=(root) ALL
z789 ALL=(root) ALL
mike ALL=/rm --> (this means that he can not do rm.)

Hopefully I am clear enough.

Appreciate your help.

Thanks,

Mike

[Rick Garland]

Preceed the commands with the bang (!) character

Example
mike !rm --> (this means that he can not do rm.)

[Mike_305]

Thanks for your help.