wiki.server17.net

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

== SUDO Example: ==
<code>
## Lock other Users
#user1 ALL = NOPASSWD: /usr/bin/passwd -[lu] user2, (root) /usr/bin/passwd -[lu] user3, (root) /usr/bin/passwd -[lu] user4, (root) /usr/bin/passwd -[lu] user5
</code>

== Do not allow specific commands to users ==
Example ''/etc/sudoers''
<code>
...

## Command Aliases
## These are groups of related commands...
Cmnd_Alias SHELLS = /bin/sh, /bin/csh, /bin/ksh, /bin/bash, /bin/tcsh, /bin/zsh
Cmnd_Alias SUDOSECURITY = /bin/su, /bin/passwd, /sbin/userdel, /sbin/useradd, /bin/chattr, /sbin/visudo, /bin/vi, /bin/sudoedit /etc/sudoers, sudoedit /etc/sudoers*, /bin/sudoedit /etc/sudoers.d/*, sudoedit /etc/sudoers.d/*

...
</code>

And place a file in ''/etc/sudoers.d''. For example /etc/sudoers.d/myuser
<code>
myuser ALL=NOPASSWD: ALL, !SUDOSECURITY, !SHELLS
</code>
myuser can do everthing except the commands listed under SHELLS and SUDOSECURITY.

== sudo and forward X ==
After using the sudo-command to switch to another user, you have to merge the X-session:
<code>xauth merge /home/user/.Xauthority </code>