sudo -s

That's a good question!! Either you delete the sudo executable, or move it to some
other place or rename it to a different name!! A good solution is move the executa
-ble 'sudo to your '/home/' and don't give the other users read-access or any other
access. 'Sudo' is located in the '/usr/bin' folder.

*www.sudo.ws/pipermail/sudo-users/2003-May/001538.html

In message <OF5E57D999.156B24E2-ON86256D24.00575E49-86256D24.005773A6 at cis.cat.c
om>
so spake "Nicholas C. Aganan" (Aganan_Nicholas_C):

> How will I disable sudo -s? I don't want this functionality to be given to
> my users.

"sudo -s" is just a shortcut for "sudo $SHELL". If your sudoers
file doesn't allow users t orun shells, they won't be able to do
"sudo -s" either.

- todd

Click to expand...

Also refer:
*forums.macnn.com/archive/index.php/t-18166.html

Just make it non-executable for other users except you.
But if your account is compromised then well this trick won't help and neither will JGuru's.

If you want the best unbreakable protection you must include Biometrics. Including
a retina scan & a thumb print scanner. There are some Biometrics software
available in Linux. The researchers say that even finger-print can be spoofed by using
gelatin or other similar substances!! So the new Biometrics software looks for Sweat!!
Read more about it here:
*news.zdnet.com/2100-1009_22-6003440.html

any body can gain access to root by cmd "sudo -s" howto prevent this

Click to expand...

Wouldn't they have to know the pasword as well??

ravix said:

any body can gain access to root by cmd "sudo -s" howto prevent this

Click to expand...

How dood?? My FC5 says "mediator is not in the sudoers file. This incident will be reported."

Well mediator just do this
And search for tutorials on net on how to add user/group to sudoers file.
I have left the ubuntu defualt
%admin ALL=(ALL) ALL.
Well you can customise it to your needs.