Hello there
I'm trying to devise a new sudoers configuration while building a new SOE and would like to force everyone (including system administrators) to use rootsh in favour of doing things like sudo -s, sudo bash, sudo tcsh and so forth. Effectively, use sudo to use any shell other than rootsh.
Is there a way to allow users to run anything they want except shells.
I've seen this question in different forms on various forums. Each time, the result never seems to be a full answer. I would like to prevent users from being able to sudo to root while maintaining the ability to sudo to other users. As tedious a task as this is I already know I can lock out editing the sudoers file and from running sudo bash|sh|etc.
Lost the ability to sudo. So I put in a liveCD and mounted the partition and made the edits to the /etc/sudoers file that way.
The changes saved and I now have the ability back to sudo.
But I lost the ability to choose which userid to install gui with. I only get the ability to enter the root password as where I should have the choice box between my users.
http://imgur.com/hiVDt
I'm trying to adapt a tutorial into an easy to use script (http://qt-project.org/wiki/RaspberryPi_Beginners_guide).
I'm trying to reduce the need for sudo/root as much as possible (preferably, only for the final dd step).
This tutorial will guide you on how to allow a group of users to run all the commands without sharing your system root password in Fedora / Redhat / CentOS based Distros.
What is the difference between the root account i.e.
Sudo returns this error:
sudo: effective uid is not 0, is sudo installed setuid root?
And su - returns this:
su: Authentication failure
The user I'm using is a member of the following groups:
disk wheel locate network video audio optical floppy storage power users
I can log in to root, but can't elevate my user privileges, and I'm sure the password I'm giving to both is correct.
During an installation, as usual, we create our main user account, and then we can do sudo commands with it without problem.
Now, when I created another account, and I wanted to do sudo, it gave me error that the account is not in the sudoers file. In that file I found out that users in %admin and %sudo groups can gain root privileges.
If a local user isn’t allowed to run commands with sudo, he or she must always enter the administrator or
Email this page
