[sudo-users] How to disable ( deny ) user to change the password of root

[Gordon Messmer]

Matthew Flaschen wrote:
> Gordon Messmer wrote:
>> Yes, there is.  Don't let users execute any of those commands directly.
> 
> That's not a solution.  The user can still edit /etc/passwd manually.

In the solution I propose, the user can only edit "passwd-wrapper" and 
other wrappers with sudo.  In that configuration, they aren't given any 
access to edit /etc/passwd manually.