Restricting Sudo - Shall I write a spec

[Matt Zimmerman]

On Sat, Feb 10, 2007 at 08:12:37AM +0000, Mark Syms wrote:
> Hi all,
> 
> I've been thinking recently that Ubuntu is too permissive out of the box
> with regard to configuration of sudo. Would it be better for each of the
> admin tools that are installed in the basic install to add/remove
> themselves from a list of "authorised" sudo tools in their
> postinstall/prerm scripts?

As sudo is, by default, the only way to obtain root privileges, restricting
it to certain commands would make it impossible to, e.g., run a shell as
root, something which users expect to be able to do.

-- 
 - mdz