I want to edit my sudoers file so users have different privileges based on where they are logging in from. I want to have 3 different locations: External network(internet), internal(local lan) and the console(user sitting in front of the computer). defining external and internal would be something like:
Host_Alias PRIVNET = 10.6.66.0/25, 10.6.67.128/28
But how do I define the console?
I don´t want a user to be able to make changes to the firewall or sudoers for example, if he is not on location if something goes wrong or maybe even if his account is compromised.
I just want to make sure that the user is nearby when making critical changes.