If this is your first visit, be sure to
check out the FAQ. You will have to register
before you can post. To start viewing messages,
select the forum that you want to visit from the selection below.
Please do not use the CODE tag when pasting content that contains formatting (colored, bold, underline, italic, etc).
The CODE tag displays all content as plain text, including the formatting tags, making it difficult to read.
And my two British pence in response to that... :P
(K)Ubuntu ignores (read: corrupts) the traditional approach to root access by default
As I understand it, su and sudo grew up in parallel. (I could be mistaken, though.)
the right to “do like root does” (aka sudo) is granted to ordinary users!
Uh, don't both su and sudo do this? With su, you need to know the root password. With sudo, you need to be in the sudoers file (or is it the Admin group? I forget.) The idea of both is that you (being an ordinary user) use either su or sudo with appropriate authorisation when you need to do tasks as root.
From my (paranoid) point of view, that’s a major threat to the operating system’s security as well as to it’s stability (read: life expectancy) - as every experienced administrator well knows, it’s sound and save to keep regular (read: simple-minded) users as far away from the root account as by every means possible.
Then don't allow more users than necessary to use sudo. It's the same as not letting more people than necessary know the root password, except you can revoke it without telling everyone else the new root password.
I never used to like sudo over su, but it's grown on me as a method. sudo also has advantages in situations where more than one person needs to be granted root access (eg a server with multiple admins) - as you can then log what each user performs as root, in case something goes wrong and you need to retrace steps (and point the finger where needed).
I never used to like sudo over su, but it's grown on me as a method. sudo also has advantages in situations where more than one person needs to be granted root access (eg a server with multiple admins) - as you can then log what each user performs as root, in case something goes wrong and you need to retrace steps (and point the finger where needed).
A very good argument in favour of "sudoism" (and definitely worth an amendment to my little pamphelt on this topic ...) thank you for pointing this out to me
Comment