-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [EMAIL PROTECTED] wrote:
>from the sudoers man page: > > john ALPHA = /usr/bin/su [!-]*, !/usr/bin/su *root* > > On the ALPHA machines, user john may su to anyone except > root but he is not allowed to give su(1) any flags. > >you could also get rid of the [!-]* to let it pass flags... but the one >mentioned in the man page should be the best solution... isn't it? If you only want to prevent su to root, yes. Our wrapper allows us to specify a range of excluded UIDs, which is very handy. - -d - -- David Talkington PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQA/AwUBPQkqT79BpdPKTBGtEQJ/XwCg7F+8Domy/Gl4UmdkaJunZ84rv14AnjzO 8cfjbWsQQt6gRoGlfOhNkTQk =VA0s -----END PGP SIGNATURE----- _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
