I am, basically, in agreement with Wissam Al-Roujoulah on this.
We need to add few users to the sudoers file
Do you, really need to do this? Maybe there are other ways, using
acl or regular UNIX permissions.
As Wissam Al-Roujoulah has already pointed out, trying to "blacklist" certain commands, is in reality a really bad idea (read below from
man sudoers, emphasis mine):
Note, however, that using a ‘!’ in conjunction with the built-in
ALL alias to allow a user to run “all but a few” commands rarely
works as intended
Instead you can specify a "whitelist", e.g. the actual commands the users are allowed to run. Something like this:
The above will allow
user1 to shut down. You can add more commands in a comma separated list.
Read more about this here.