I recently spun up a Ubuntu Server 14.04 LTS EC2 instance and loaded virtualmin. Install went fine, no real issues. Once thing I have noticed is that when I create a virtual server the 'administration' user for the virtual server domain ends up as a 'master admin', meaning no matter what domain administration user you login as, you can basically do anything you want to any domain.
Is that normal? Doesn't seem like it should be doing this.
Wondering if for some reason the EC2 instance had something screwy going on with the /etc/sudoers and is making giving every user virtualmin creates sudo access.
Anyone have experience with this or any idea how to fix?
Howdy,
Only the root user, and users with "sudo" rights, should be a Master Admin.
Do these particular users perhaps have the sudo ability? Are they perhaps part of a group which gets sudo rights?
-Eric
Finally got back to looking at this and I've confirmed the other users do not have sudo ability. I got one setup with SSH into the EC2 instance and they cannot sudo and are not in any other groups that would allow sudo.
Also checked the webmin.acl to make sure nothing was in there
Very weird. No matter what user I login as they have full access to every single virtual server