Arch Linux; further restrict access to sudo
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I'm setting up my Arch Linux system on VirtualBox, and I've gotten to the step of adding sudo, but I want to do something to further secure admin access.
I've created my own custom group, gg3, and added my user to the group. But I'd like to somehow require sudo to only allow access to users who are in both wheel and gg3. I've checked the sudo manual, I've tried googling it, but I haven't found anything. Does anyone know of a way to do this?
arch-linux sudo group
asked Mar 6 at 15:48
sprouse
13
add a comment |Â
up vote
0
down vote
favorite
I'm setting up my Arch Linux system on VirtualBox, and I've gotten to the step of adding sudo, but I want to do something to further secure admin access.
I've created my own custom group, gg3, and added my user to the group. But I'd like to somehow require sudo to only allow access to users who are in both wheel and gg3. I've checked the sudo manual, I've tried googling it, but I haven't found anything. Does anyone know of a way to do this?
arch-linux sudo group
asked Mar 6 at 15:48
sprouse
13
I don't think this is possible just usingsudo
– rusty shackleford
Mar 6 at 16:47
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to usesudo" (though I question what other purpose "wheel" has in this case). I'd guess you could makesudoexecutable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it
– Fox
Mar 7 at 13:45
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I'm setting up my Arch Linux system on VirtualBox, and I've gotten to the step of adding sudo, but I want to do something to further secure admin access.
I've created my own custom group, gg3, and added my user to the group. But I'd like to somehow require sudo to only allow access to users who are in both wheel and gg3. I've checked the sudo manual, I've tried googling it, but I haven't found anything. Does anyone know of a way to do this?
arch-linux sudo group
asked Mar 6 at 15:48
sprouse
13
I'm setting up my Arch Linux system on VirtualBox, and I've gotten to the step of adding sudo, but I want to do something to further secure admin access.
I've created my own custom group, gg3, and added my user to the group. But I'd like to somehow require sudo to only allow access to users who are in both wheel and gg3. I've checked the sudo manual, I've tried googling it, but I haven't found anything. Does anyone know of a way to do this?
arch-linux sudo group
asked Mar 6 at 15:48
sprouse
13
asked Mar 6 at 15:48
sprouse
13
asked Mar 6 at 15:48
sprouse
13
asked Mar 6 at 15:48
sprouse
13
13
I don't think this is possible just usingsudo
– rusty shackleford
Mar 6 at 16:47
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to usesudo" (though I question what other purpose "wheel" has in this case). I'd guess you could makesudoexecutable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it
– Fox
Mar 7 at 13:45
add a comment |Â
I don't think this is possible just usingsudo
– rusty shackleford
Mar 6 at 16:47
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to usesudo" (though I question what other purpose "wheel" has in this case). I'd guess you could makesudoexecutable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it
– Fox
Mar 7 at 13:45
I don't think this is possible just using
sudo– rusty shackleford
Mar 6 at 16:47
I don't think this is possible just using
sudo– rusty shackleford
Mar 6 at 16:47
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to use
sudo" (though I question what other purpose "wheel" has in this case). I'd guess you could make sudo executable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it– Fox
Mar 7 at 13:45
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to use
sudo" (though I question what other purpose "wheel" has in this case). I'd guess you could make sudo executable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it– Fox
Mar 7 at 13:45
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f428546%2farch-linux-further-restrict-access-to-sudo%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
I don't think this is possible just using
sudo– rusty shackleford
Mar 6 at 16:47
@rustyshackleford Yeah, I kinda figured. Thanks anyways. I'll leave this question open to see what other people put down.
– sprouse
Mar 6 at 16:48
This seems like a strange thing to do, when you could just make a third group (how about "sudoer") for "people that should be able to use
sudo" (though I question what other purpose "wheel" has in this case). I'd guess you could makesudoexecutable only by members of the one group, and use the normal methods to allow use only by members of the other, but that's complicated, doesn't scale past two groups, and could confuse you later if you forgot you did it– Fox
Mar 7 at 13:45