Jim Ntosas via FreeIPA-users wrote:
I wanted to ask if there is any way to exclude only one sudo commands
and allow all the others.
For example, I want to exclude "passwd" command but allow all the others
without need to write each of the one by one.
This is more a sudo question than an IPA question but it is not
recommended to even try this.
See the SECURITY NOTES section in sudoers(5).