[SSSD-users] sudorules - allow all and exclude some

Szymon Jazy szymon.jazy at gmail.com
Wed May 7 08:11:03 UTC 2014

Is there a proper way in sudo rules to allow any command and exclude only
some groups?
Something like:
%test_group ALL=    (ALL)       ALL, !SU, !SHELLS
If I try to do this (gui/cli) I get an error:
ipa: ERROR: commands cannot be added when command category='all'

Non proper way (bug ?) is to first add deny groups and after that add allow
all :)
It should be fixed in this, but it seems to still work (

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140507/2efda0f9/attachment-0001.html>

More information about the sssd-users mailing list