sudo -s

[ravix]

any body can gain access to root by cmd "sudo -s" howto prevent this

[JGuru]

That's a good question!! Either you delete the sudo executable, or move it to some
other place or rename it to a different name!! A good solution is move the executa
-ble 'sudo to your '/home/' and don't give the other users read-access or any other
access. 'Sudo' is located in the '/usr/bin' folder.

[praka123]

http://www.sudo.ws/pipermail/sudo-us...ay/001538.html

In message <OF5E57D999.156B24E2-ON86256D24.00575E49-86256D24.005773A6 at cis.cat.c
om>
so spake "Nicholas C. Aganan" (Aganan_Nicholas_C):

> How will I disable sudo -s? I don't want this functionality to be given to
> my users.

"sudo -s" is just a shortcut for "sudo $SHELL". If your sudoers
file doesn't allow users t orun shells, they won't be able to do
"sudo -s" either.

- todd

Also refer:
http://forums.macnn.com/archive/index.php/t-18166.html

[mehulved]

Just make it non-executable for other users except you.

sudo chmod o-x /usr/bin/sudo

But if your account is compromised then well this trick won't help and neither will JGuru's.

[JGuru]

If you want the best unbreakable protection you must include Biometrics. Including
a retina scan & a thumb print scanner. There are some Biometrics software
available in Linux. The researchers say that even finger-print can be spoofed by using
gelatin or other similar substances!! So the new Biometrics software looks for Sweat!!
Read more about it here:
http://news.zdnet.com/2100-1009_22-6003440.html

[chesss]

any body can gain access to root by cmd "sudo -s" howto prevent this

Wouldn't they have to know the pasword as well??

[mediator]

Originally Posted by ravix

any body can gain access to root by cmd "sudo -s" howto prevent this

How dood?? My FC5 says "mediator is not in the sudoers file. This incident will be reported."

[mehulved]

Well mediator just do this

su
visudo

And search for tutorials on net on how to add user/group to sudoers file.
I have left the ubuntu defualt
%admin ALL=(ALL) ALL.
Well you can customise it to your needs.