Using sudo to Keep Admins Honest? sudon't!

[Alexander Jacob Tsykin]

On Monday 06 November 2006 06:32, Derek Broughton wrote:
> Tristan Wibberley wrote:
> > No, you should log out of the second account, and then in to the first
> > account giving a securable route (via gdm, bugs notwithstanding).
>
> Except it's NOT a securable route - unless you're going to remove "su" from
> the system completely, because what a user "should" do is not what they're
> _likely_ to do when given a choice between simple and more complex options.
>
> In any case, I fail to see how gdm is more secure than sudo.
The point was that you log into you ":administrator account" to use sudo, and 
your other account for all other tasks.

Sasha