Manjaro Managing Sudoers

how can i remove sudo power from my standard user? example: when I install an app using the standard user I enter sudo and it installs.

what i want to happen in my standard account is to remove the sudo power. when i execute sudo nothing will happen. like that and otherwise when I want to sudo I will use root.

If you are confused by my explanation, you can ask in the comment section, thank you.

my security concern is because my pc is also used by others I’m afraid because last time I saw a keylogger.

Just remove your user from wheel group:

gpasswd --delete <user> wheel

You can also restrict sudo access to specific commands, more about sudo configuration you can find here

1 Like

Remove your user from the wheel group.

“Comment section”? This isn’t YouTube, you know? :wink:

Why not create another (and unprivileged) account for them, then? GNU/Linux is a multi-user platform.

2 Likes

i dont want to create multiple account. i just want to use only one

i already did but nothing happen

You need also relogin or restart PC to effectively remove current user from group.

1 Like

The change will only take effect after rebooting.

okay i try reboot now

Its not working… :frowning: may be i try to re installed it again

the command gpasswd --delete wheel is not working

You are apparently using runas. Try this then (as root)… :point_down:

gpasswd --delete your-user-name sudo

Log out and back in to see the effect.

User account can be changed from Administrator to Standard using Manjaro Settings Manager > User Accounts GUI
manjaro-settings-manager -m msm_users

GUI can also show group memberships for Administrator or Standard accounts

3 Likes

i did try that but. when i try to sudo in standard user it directed to root accout :). may be i did something wrong thank you for your help sir. i try to reinstalled it again

Your concept is just stup…ahm wrong. Instead of creating account for each user as it should be, you will all share an account and everybody can mess the config, infect the home or just delete your files. And guess what: you still need a root account, so you still have 2 accounts.

Just make another unprivileged account for everybody else, if you insist on going this road. And for schools and hotels there are other kiosk mode containerized solutions.

6 Likes

Or, change your password, and let nobody else near your machine.

If others know how to use sudo, they probably know how to drop to Super User (su) as well. Creating a second restricted account for others and changing the password of your account, is the best way forward.

That is all. Cheers.

1 Like

As far as I know, the root account isn’t even active by default.
This can be set at installation time (set a password for “root”)

You can do things as root/admin - with the help of that (your) user being part of the “wheel” group.

You can set a password for root - and then remove the users from the group “wheel”
so that they cannot gain root permissions by providing their password.

How can anyone possibly argue with that logic? :person_shrugging:

1 Like