<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=UTF-8" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Stephen Carville wrote: <blockquote cite="mid200811171059.11486.scarville@landam.com" type="cite"> <pre wrap="">On Monday 17 November 2008 00:49, <a class="moz-txt-link-abbreviated" href="mailto:edwardspl@ita.org.mo">edwardspl@ita.org.mo</a> wrote: </pre> <blockquote type="cite"> <pre wrap="">Dear All, For the sudo setting ( visudo ) : User_Alias SYSADM = manager Cmnd_Alias NOROOT = !/usr/bin/passwd root Cmnd_Alias USER = /usr/sbin/adduser, /usr/bin/passwd, /bin/chown, /usr/sbin/userdel SYSADM MH = (ALL) NOROOT,USER BUT the test result as the following : [manager@xxx ~]$ sudo passwd root Changing password for user root. New UNIX password: So, what wrong of the config ? </pre> </blockquote> <pre wrap=""> I think the exception has to be after the allowed rule: SYSADM MH = (ALL) USER,NOROOT It's been while since I checked that part of the code...</pre> </blockquote> Hello to you, Just test as the following rule is successfuly: <pre wrap="">SYSADM MH = (ALL) USER,NOROOT</pre> BUT there is another problem of it ( I think it is a bug of sudo )..... When you enter "sudo passwd" without the option (eg:userid): [manager@xxx ~]$ sudo passwd Changing password for user root. New UNIX password: OH...the user manager who can change root password ? So, is there any solution for this case of problem ? Thanks ! Edward. </body> </html>