Search Results

Your understanding is correct, but this is not a security hole unless it is managed badly.

The root user decides who is added to the sudoers file, and also what commands this user can run as sudo....

The simplest way is to make them log in as a user which does not have SUDO access.

In Ubuntu Linux, this log is located in /var/log/auth.log