Help - Restrict root privileges - What is indispensable?

[James Gray]

On 24/11/2008, at 10:54 AM, Manuel Gomez wrote:

> Hi, i would like to restrict the privileges of root. Now goes the
> question: why?
>
> I only need the essential for run my OS:
>
> Can access to my frontend netfilter (iptables) shorewall.
> Use chmod, run sh scripts, and any command essential for running the  
> OS.
>
> I would like more security, and i have to open gksu constantly, so i
> have chossen this. I not going to use sudo because Shorewall doesn't
> accept using it as a normal user.
>
> How could I change /etc/sudoers?

With "visudo" generally.  But if you really want to "restrict root  
privileges" and not simply restrict access via sudo, then you should  
be looking at SElinux.  Google is your friend.

Cheers,

James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2417 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20081124/5f306de6/attachment.bin>