I want to make it impossible for any root commands to be issued during a Live Boot session. I don't want anyone being able to sign in as root. Period!
So, is it possible to stop the sudo service? If so, would this accomplish what I'm trying to do?
I tried the three possible stop service commands below but chkconfig --list
show sudo still working:
(1)
sudo stop sudo
(2)
sudo /etc/init.d/sudo stop
(3)
sudo service sudo stop
Best Answer
You can't get rid of
sudo
the way you think, but you can explicitly define what users are allowed to do, all the way from disallowingsudo
through to requiring passwords for particular commands. It is very powerful.You do this through the use of
sudoers
From Ubuntu.com:
It does this through four kinds of aliases: User_Alias, Runas_Alias, Host_Alias and Cmnd_Alias which work as their names suggest.
which