[ubuntu-uk] Creating 'root' account. (sudo, audit trails)

[Alan Pope]

Hi Matthew,

On Sun, 2007-08-05 at 15:50 +0100, Matthew Wild wrote:
> How do you get around sudo -i or sudo bash? Presumably that would free
> them of the detailed logging?

sudo can be configured to allow not only specific users to run commands
under sudo, but can also limit what those commands are. So you could
(for example) allow access to run tools like update-manager, but not
allow anything else.

By default of course the standard install of Ubuntu allows the first
user to do anything under sudo, no restriction. You can of course build
on that.

Cheers,
Al.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-uk/attachments/20070805/0bada39f/attachment.pgp