Is it possible to restrict other sudoers from changing the root password in Ubuntu

1,247 views

Skip to first unread message

Manohar Bhattarai

unread,

Apr 10, 2011, 1:31:44 PM4/10/11

to iit...@googlegroups.com, foss-...@googlegroups.com

Hi,

Is it possible to prevent other sudoers from changing the root password? I want only me(as root) be able to change password and prevent other sudo users from changing the root password. If it is possible then how to do it?

Thanks.

--
Regards,
Manohar Bhattarai (मनोहर भट्टराई)
http://about.me/manoharbhattarai
Blogs:
http://manoharbhattarai.wordpress.com/
Microblogs:
Twitter :- http://twitter.com/mhrbhattarai
Identi.ca :- http://identi.ca/manoharbhattarai

tuxdna

unread,

Apr 10, 2011, 5:07:09 PM4/10/11

to iit...@googlegroups.com, Manohar Bhattarai, foss-...@googlegroups.com

> Is it possible to prevent other sudoers from changing the root password? I
> want only me(as root) be able to change password and prevent other sudo
> users from changing the root password. If it is possible then how to do it?

http://www.gratisoft.us/sudo/sudoers.man.html

No there is no direct way to do so using /etc/sudoers configuration file.

It is possible to limit a user ( who is using sudo ), to only certain commands.
So you may want to allow users to certain commands except:
passwd
su
(... the list goes on ... )

To just disallow certain commands following might help:
http://www.linuxquestions.org/questions/linux-security-4/sudo-to-disallow-certain-commands-855453/