Kubuntu experience
Brian Astill
bastill at adam.com.au
Mon Apr 18 07:22:39 UTC 2005
On Sun, 17 Apr 2005 01:01, Pierfrancesco Caci wrote:
> :-> "Brian" == Brian Astill <bastill at adam.com.au> writes:
> > sudo is dangerous and also awkward for anything other than an
> > occasional
>
> You should tell us all why sudo would be more dangerous than having a
> root login enabled. Please.
I can't understand why you don't understand! :-)
The standard Unix way of doing things is for root to own the system and
to allow users to use that system subject to not being allowed to mess
about with it
Root is all-powerful. I have known some paranoid people who would not
operate as root without first disconnecting from the network and the
internet - and then would not leave the system unattended until their
root work was finished. They were (overly?) concerned that someone
might break in electronically or physically and wreak havoc.
In any event, one does NOT operate as root on a day-to-day basis. You
set up a personal account for normal usage.
Sudo is an emergency privilege sort of thing. Root might be going on
holiday and need someone to run things while they are away. Granting a
sudo allows the "assistant" to run the system as root WITHOUT root
having to reveal root's password to them. The sudo privilege can be
revoked by root at any time.
The problem with sudo privilege is that you are always effectively
running as root - all anyone has to do is type "sudo" before any
command they wish to use - even "sudo rm -fR /* - to do whatever they
wish with your system. NOT secure.
--
Regards,
Brian
More information about the ubuntu-users
mailing list