I reached the end of the internet with no success, so now I turn to you guys.
What I'm after is a way to implement four eyes principle on the OS level for certain commands in Linux.
Example : The admin group has 10 members. The reboot command should not be allowed to be performed by any one admin alone, but should require a second admin to enter his/her credentials as well.
Work-flow : Admin A runs "sudo reboot". Terminal prompts for Admin A password. Terminal prompts for Admin B username and password. If both users are in the admin group, the command will run.
I have started to look into PAM, but couldn't find any immediate way to do this.
Does anyone know how to do this?