How to Restrict sudo Access

Step 1: Create a Limited Sudo Group

sudo groupadd limited-sudo

Step 2: Edit sudoers with visudo

sudo visudo -f /etc/sudoers.d/limited-sudo

Add:

%limited-sudo ALL=(ALL:ALL) /bin/systemctl restart nginx, /bin/systemctl status nginx

Step 3: Add User to Limited Group

sudo usermod -aG limited-sudo username

Step 4: Verify

sudo -l -U username