[sapphire_tomb]

My last job was at a UK bank. All our *nix systems were configured with a specific whitelist of commands that could be run via sudo. We found this an enormous pain in the arse when the powers that be decided to deploy ansible everywhere, and found that none of its "become" methods would work if sudo was set up like that.

[fullstop]

I had a job once which had a sudo whitelist, but vi was included. !sh and you had root.

[TheRealDunkirk]

Classic case of #CorporateIT applying white paper "rules" and not understanding what they're doing. If I had a nickel...

[fullstop]

Exactly, forms were filled in and boxes were checked off.

[acdha]

I also liked one where you could `sudo rpm -i`

[jeremyjh]

Those environments could continue to use sudo. I'm sure Red Hat will support it until long after we all dead.

[WesolyKubeczek]

Not even using "su" as become_method? Granted, it would require the root's password, so it's another tradeoff, but...