The sudo command allows users to run commands with the privileges of different users (often root). If you want a user to have restricted commands in his own account you need to either not give him or her a full shell account or use a restricted shell (e.g. rbash or put the user's account in a chroot jail). Note, however, unless you carefully design the restricted or jailed environment, it may be possible for the user to "escape". It would be best if you described exactly what you need to do and accomplish. The simplest solution is to not give anyone you don't trust with user level access an account on your system...
|