Hy, a friend and me want to share a Linux-Machine. We both need to get root-rights via sudo for administering that machine. Is it somehow possible to deny the access to the home-folder for the other one, although he can become root?
You could install encrypted home directories. This page has a writeup on how to install under Ubuntu.
you could restrict/deny access to
and so on. you can provide the exact commands you want your friend to be able to use, including the command line parameters, if you want to lock it down further (like with
you basically need to figure out /what/ he needs root access for, and dole it out sparingly. or learn to trust him.
two additional examples; vim /etc/* allows the user to edit anything in /etc/ as root, and the last one denies access to
http://linux.die.net/man/5/sudoers , the