<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=Big5" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Dear All,<br>
<br>
Just previewed the sudo manual :<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.sudo.ws/sudo/man/sudoers.html">http://www.sudo.ws/sudo/man/sudoers.html</a><br>
<pre>pete HPPA = /usr/bin/passwd [A-z]*, !/usr/bin/passwd root</pre>
<p>The user <strong>pete</strong> is allowed to change anyone's
password except for root on the <em>HPPA</em> machines. Note that this
assumes <em>passwd(1)</em> does not take multiple usernames on the
command line.</p>
If the Linux System is FC System, so how about the format of it ?<br>
<br>
Many thanks !<br>
<br>
Edward.<br>
-------- Original Message --------
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">Subject: </th>
<td>[sudo-users] How to disable ( deny ) user to change the
password of root</td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">Date: </th>
<td>Mon, 17 Nov 2008 16:49:05 +0800</td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">From: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:edwardspl@ita.org.mo">edwardspl@ita.org.mo</a></td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:sudo-users@sudo.ws">sudo-users@sudo.ws</a></td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">CC: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:fedora-list@redhat.com">fedora-list@redhat.com</a> <a class="moz-txt-link-rfc2396E" href="mailto:fedora-list@redhat.com"><fedora-list@redhat.com></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>Dear All,
For the sudo setting ( visudo ) :
User_Alias SYSADM = manager
Cmnd_Alias NOROOT = !/usr/bin/passwd root
Cmnd_Alias USER = /usr/sbin/adduser, /usr/bin/passwd, /bin/chown,
/usr/sbin/userdel
SYSADM MH = (ALL) NOROOT,USER
BUT the test result as the following :
[manager@xxx ~]$ sudo passwd root
Changing password for user root.
New UNIX password:
So, what wrong of the config ?
Many thnak for your hints...
Edward.
____________________________________________________________
sudo-users mailing list <a class="moz-txt-link-rfc2396E" href="mailto:sudo-users@sudo.ws"><sudo-users@sudo.ws></a>
For list information, options, or to unsubscribe, visit:
<a class="moz-txt-link-freetext" href="http://www.sudo.ws/mailman/listinfo/sudo-users">http://www.sudo.ws/mailman/listinfo/sudo-users</a>
__________ NOD32 3616 (20081117) Information __________
This message was checked by NOD32 antivirus system.
<a class="moz-txt-link-freetext" href="http://www.nod32.com.hk">http://www.nod32.com.hk</a>
</pre>
</body>
</html>