Allow sudo su - on visudo only to one or some users of a group that access by ldap

For example, I have visually defined the following:

% dev ALL = (ALL) ALL

What I need is that only some users or only one of the dev group can do the sudo su -, not all of the group ... is it possible to do this?

  • Can you create a new group?
    – kemotep
    Feb 21, 2019 at 16:40
  • Just use username instead of %dev. eg I have sweh ALL=(ALL) ALL on my machine to allow the user "sweh" all commands. Feb 21, 2019 at 16:42
  • 1
    Related to sudo su -: Is there ever a good reason to run sudo su?
    – Kusalananda
    Feb 21, 2019 at 17:35
  • yes but in my case I need the sweh user to be in the group% dev which is authenticated by openldap Feb 21, 2019 at 21:45


You must log in to answer this question.

Browse other questions tagged .