Quote:
Originally Posted by
lhareigh890
thanks. however if the 'mayedit' user will execute sudo vi /file/in/question, he will be able to edit it right? the user will have like sudo access to all (ie. shutdown, cp, mv, any commands) but not to a specific files i will mention. is this possible?
Ahem,
"mayedit" is not a user, but a
user group. Users are "willedit" and "willnotedit".
By giving a user the right to "sudo vi" this user will effectively be able to
become root and use any command - shutdown, mv, cp and anything else included - without even having to use "sudo".
And, no, this is not possible. root may do everything and if you allow a user to become root, you have allowed him to do everything effectively. There is no restricting after you have given full rights. This is why you shouldn't use sudo for this, as explained above.
I hope this helps.
bakunin