sudo命令详解

sudo实验：
开启sudo日志
[root@localhost ~]# visudo
# Defaults specification
Defaults logfile = "/var/log/sudo"
设置权限
[root@localhost ~]# visudo
# %users localhost=/sbin/shutdown -h now
lisi localhost=/bin/ping
han localhost=!/bin/ping
测试：
[han@localhost ~]$ sudo ping 192.168.56.200 失败
[lisi@localhost ~]$ sudo ping 192.168.56.200 成功
[root@localhost ~]# tail /var/log/sudo //查看日志
Sep 24 00:39:02 : han : command not allowed ; TTY=pts/0 ; PWD=/home/han ;
USER=root ; COMMAND=/bin/ping 192.168.56.200
Sep 24 00:39:18 : lisi : TTY=pts/0 ; PWD=/home/lisi ; USER=root ;
COMMAND=/bin/ping 192.168.56.200