better example of su but not root su

diff --git a/sample.sudoers b/sample.sudoers
index fdeb70dd9a0f8c0c2bf7a4d279993ff5b7b7fb9e..7089c95c71e8deb52195d7617dd224cb7f748145 100644 (file)
--- a/sample.sudoers
+++ b/sample.sudoers
@@ -88,4 +88,4 @@ jim           +biglab=ALL
 fred           ALL=(oracle) /bin/ls,(#-2) NOPASSWD:/bin/date
 
 # somedude may su to anyone but root and must give su an argument
-somedude       ALL=/usr/bin/su ?*, !/usr/bin/su root
+somedude       ALL=/usr/bin/su ?*, !/usr/bin/su *root*

diff --git a/sudoers.pod b/sudoers.pod
index de8d045dd52bb4701202e34aee8941d080a9d7c1..6d9ad9ed4b7e514db80df2376f9a6bdbd117c80b 100644 (file)
--- a/sudoers.pod
+++ b/sudoers.pod
@@ -171,7 +171,7 @@ with a "\" if used in command arguments: ",", ":", "=", "\".
     PARTTIME    ALL=ALL,!SHELLS,!SU
     +interns    +openlabs=ALL,!SHELLS,!SU
     britt       REMOTE=SHUTDOWN:ALL=LPCS
-    jimbo      CUNETS=/bin/su ?*,!/bin/su root
+    jimbo      CUNETS=/bin/su ?*,!/bin/su *root*
     nieusma     SERVERS=SHUTDOWN,/etc/reboot:\
                 HUB=ALL,!SHELLS
     jill        houdini=/etc/shutdown -[hr] now,MISC