How to disable sudo to a specific user?

Question

linux

How to disable sudo to a specific user?

Answer 1

Remove user from sudoers

Answer 2

Do not allow this user to runas
Or do you have a user who can sudo su - do? So you won’t forbid anything, because after sudo su - he is a root that can do everything

Answer 3

Try to look in the direction of pam.d, it controls the logic of how sudo works, I think there should be a module to block the action according to your criteria. And if not, then there is an example on the net of how to write such a module yourself (in c++).

Answer 4

Usually, sudoers allow a group, which includes the necessary users. It is incorrect to act according to the method "allow all, prohibit one" - incorrectly. Figure out who exactly needs sudo access and add them to the group.