Of course, that would be sufficient.

I thought in a too complicated way.

Why not just remove the entry from "/etc/sudoers.d/zzzzzzz", while being 
in a "chroot"?

-Ramon

On 26/10/2022 20:35, Jack wrote:
> Could you not interrupt  grup and append "single" or "init=/bin/bash" 
> to the kernel command line? 

-- 
GPG public key: 5983 98DA 5F4D A464 38FD CF87 155B E264 13E6 99BF