deny su - root

[mark]

Matias Nicolas wrote:
> It worked!! thanks!

You can have even finer-grained control using visudo to edit /etc/sudoers.
Using that, you can limit not only what users can use sudo, but who they can
sudo to, and what commands they can run through sudo.

If you do, *do* use visudo: it will check the syntax, and if you happen to be
using sudo to do stuff, and you make a mistake, it will take someone who can
log in as root to fix it.

	mark