Installation permission for a user

Asked by ekaswin@gmail.com

Hi All

           For a small organisation I had set up a Ubuntu 18.04 server .Presently I had created root user(Admin task) and a normal user(for application development team).How we can provide admin access to this user ?if we add this user to sudo group problem will solve ,but after this user may change root password.is it possible to block root password change by the normal user.?

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said :
#1

This is quite tricky.

The configuration of the sudo program (in /etc/sudoers file) allows specific setting to allow actions, but I am not aware of a possibility to allow all sudo actions except changing root's password. So I assume that it has to be done the other way round.

Can you list the actions that have to be done by the developers with root rights?
Just allow only these instead of "ALL".

Caution: Of course you also have to deny that the developers modify the sudoers file, because this would enable them to circumvent the restrictions.

Can you help with this problem?

Provide an answer of your own, or ask ekaswin@gmail.com for more information if necessary.

To post a message you must log in.