Stop the Service Sudo – How to Guide

rootSecurityservicessudo

I want to make it impossible for any root commands to be issued during a Live Boot session. I don't want anyone being able to sign in as root. Period!

So, is it possible to stop the sudo service? If so, would this accomplish what I'm trying to do?

I tried the three possible stop service commands below but chkconfig --list show sudo still working:

(1)

sudo stop sudo

(2)

sudo /etc/init.d/sudo stop

(3)

sudo service sudo stop

Best Answer

You can't get rid of sudo the way you think, but you can explicitly define what users are allowed to do, all the way from disallowing sudo through to requiring passwords for particular commands. It is very powerful.

You do this through the use of sudoers

From Ubuntu.com:

The /etc/sudoers file controls who can run what commands as what users on what machines and can also control special things such as whether you need a password for particular commands.

It does this through four kinds of aliases: User_Alias, Runas_Alias, Host_Alias and Cmnd_Alias which work as their names suggest.

which

Related Question