1

I made a group called "group1" and I want to give it all sudo rights only except "chmod, chown" commands. How can I change below sentence to get through this?

Before applying change:

%group1 ALL=(ALL) NOPASSWD:ALL
  • 2
    You can't. What prevents them from copying chmod to foo and running sudo foo 777? – muru Sep 1 '17 at 5:38
  • Like muru said, but even simpler someone who can use sudo can open a root shell and run any commands without restrictions in there. – Byte Commander Sep 1 '17 at 6:59

Browse other questions tagged or ask your own question.