Hi Matthew, On Sun, 2007-08-05 at 15:50 +0100, Matthew Wild wrote: > How do you get around sudo -i or sudo bash? Presumably that would free > them of the detailed logging?
sudo can be configured to allow not only specific users to run commands under sudo, but can also limit what those commands are. So you could (for example) allow access to run tools like update-manager, but not allow anything else. By default of course the standard install of Ubuntu allows the first user to do anything under sudo, no restriction. You can of course build on that. Cheers, Al.
signature.asc
Description: This is a digitally signed message part
-- ubuntu-uk@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk https://wiki.kubuntu.org/UKTeam/