cross-platform virus

John dingo at coco2.arach.net.au
Mon Apr 10 02:28:06 BST 2006


Sasha Tsykin wrote:
> Robert McWilliam wrote:
> 
>> On Sun, 09 Apr 2006 22:43:00 +1000, "Sasha Tsykin" <stsykin at gmail.com>
>> said:
>>
>>> They are not at all mutually exclusive, but most servers do nto 
>>> include both, jsut because it is overkill, and unnecessary. There is 
>>> no need to provide two accounts with admin abilities, one is 
>>> sufficient, adn making another would impact security adversely.
>>>
>>> Sasha
>>>
>>
>> You want two accounts with admin abilities when you have two people
>> admining the server, that way you can have records of who did what and
>> even set controls for who can do what.
>>
>> Robert
> 
> If this were the situation, there would be no need for a root account, 
> just two accounts which use sudo, and have it log which account used 
> sudo for what. It could be done relatively easily by password if by 
> nothing else. There is still no point in using a sudo account and a root 
> account.

The term "enterprise" is generally used to mean "big business."

Big businesses (and government) is likely to require local 
administration of segments of their global network (why would Perth WA 
call London to create a user account?). The volume of work would require 
large teams of administrators, and the bosses will require control over 
who does what, and require to be able to audit changes.

If everyone logs in as "root" to do administratio, how's it to be audited?




More information about the sounder mailing list