diff --git a/sudo/manifests/init.pp b/sudo/manifests/init.pp index 8ff64f5..0118199 100644 --- a/sudo/manifests/init.pp +++ b/sudo/manifests/init.pp @@ -65,3 +65,19 @@ define sudo::sudoer($where="ALL", $as_whom="ALL", $what="ALL") { } } + + +# Disable sudo +# +# Cannot remove sudo package itself due to depencies +# +class sudo::disable { + + exec { "chmod 0000 /usr/bin/sudo": + user => "root", + path => "/bin:/usr/bin:/sbin:/usr/sbin", + onlyif => "test -u /usr/bin/sudo", + } + +} +