How to disable sudo -i in sudoers file for users?

Linux and Unix-Like Red Hat
1

All,

I need to disable "sudo -i" and "su - " for all servers in our environment, We want to make sure no one run commands or delete files across environment using switching to root account. can you guys please lets me know if this is achievable.

Thanks and Regards
shekar

2

Anyone that can do su - needs to have the root password, therefore no setting can be done to disable it without having the ability to reverse it.
Anyone that can do sudo -i needs to be allowed as a sudoer, which means you can remove it from /etc/sudoers

3

Can it done using SETFACL?