Using sudo to Keep Admins Honest? sudon't!

[Alexander Jacob Tsykin]

On Monday 06 November 2006 06:32, Derek Broughton wrote:
> Tristan Wibberley wrote:
> > No, you should log out of the second account, and then in to the first
> > account giving a securable route (via gdm, bugs notwithstanding).
>
> Except it's NOT a securable route - unless you're going to remove "su" from
> the system completely, because what a user "should" do is not what they're
> _likely_ to do when given a choice between simple and more complex options.
>
As long as you can't use gdm to log in as su, it is as if su doesn't exist for 
all intents an purposes on teh system, and since Ubuntu to all intents and 
purposes has su disabled on install, and it can only be re-enabled by using 
sudo, it is as if it has been removed.

Sasha