> How do you force the use of sudo instead of the root password for launching > the system-config-??? Tools via the application menu? > > I believe you need to change something in the /etc/pam.d files but not sure > what Simpler than that. Just take away root's login. Then there's no way in but sudo. Just make sure sudo is set up and working correctly first. And remember that sudo is more of a help than a wall. It makes it a little easier to figure out who did what when. If someone does "sudo sh", then they either have to rip that out of the log with some kind of program that erases it's own tracks after they exit the root shell, or you know who it was wandering around unrestricted and when. (Using sudoers to restrict shells is good, just remember to make sure you restrict all the shells, even (ahem) the ones someone adds later. ;-/) -- Joel Rees <rees@xxxxxxxxxxx> digitcom, inc. 株式会社デジコム Kobe, Japan +81-78-672-8800 ** <http://www.ddcom.co.jp> **
