Hi all,

I have a question regarding sudo command and rules in FreeIPA, is it possible to allow a user to only install packages and not remove?
for example the sudo command will look,like : /usr/bin/dnf install *****

I tried to configure sudo command as "/usr/bin/dnf install" and it didn't work
If I use set the command to "/usr/bin/dnf" it works. But the user is also allowed to remove packages!

Any suggestions please?

Best regards,