1

I made a group called "group1" and I want to give it all sudo rights only except "chmod, chown" commands. How can I change below sentence to get through this?

Before applying change:

%group1 ALL=(ALL) NOPASSWD:ALL
2
  • 2
    You can't. What prevents them from copying chmod to foo and running sudo foo 777?
    – muru
    Sep 1 '17 at 5:38
  • Like muru said, but even simpler someone who can use sudo can open a root shell and run any commands without restrictions in there.
    – Byte Commander
    Sep 1 '17 at 6:59

Browse other questions tagged or ask your own question.