Re: sudo free-for-all (editing sudoers? man sudoers didn´t help)

[anthony baldwin]

Lord Sauron wrote:

>There is a file called "sudoers" in /etc which you can use to specify
>which UIDs/GIDs can gain root access.
>  
>

Okay, I´m not sure what to do to disable access for the other users.
I read man sudoers, but it seems to tell me how to enable access for 
users, but not disable it.

All I have in sudoers now is:

# User privilege specification
root    ALL=(ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL


But I am the only user in the admin group....So why do my other users 
have access to sudo?
They´re not in admin, nor in the sudo group...

I´m a bit lost.  I don´t see where it says that anyone other than root  
and myself (the only member
of the admin group) can get sudo, but, nonetheless, other users can get 
sudo...

tony



>On 12/7/06, anthony baldwin <anthonybaldwin at optonline.net> wrote:
>  
>
>>Could someone pelase explain to me why every user I have added
>>to my system has access to sudo, when I have not added them
>>to admin, sudo or root?  Nor have I added sudo, admin or root to their
>>accounts.
>>How do I disable this?
>>And, why is it that every user on the system can access everyone else´s
>>/home?  Shouldn´t each individual´s /home only be accessible to that
>>particular user?
>>I thought security was supposed to be better with sudo, or something,
>>but I´m not seeing that.  I mean, I suppose perhaps from outside the
>>system, I don´t know, but within it, it´s a free-for-all.
>>
>>I want to be the only user on the system with sudo, and I don´t want
>>anyone to be able to access my /home, or anyone else´s, besides their
>>own (like I had it in Fedora...well, okay,
>>I was the only with root, not sudo, but you get the idea)...
>>
>>tony
>>
>>
>>
>>
>>
>>--
>>kubuntu-users mailing list
>>kubuntu-users at lists.ubuntu.com
>>Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/kubuntu-users
>>
>>    
>>
>
>
>  
>