New User.

J.Markoll j.markoll at free.fr
Mon Aug 8 09:34:48 UTC 2005


Sean Miller a écrit :
> As I said in another thread I think that the Ubuntu sudo has *too* much 
> power. There should be some things that you can only do when logged in 
> as root... but that's just my view...
> Sean
Hello,
Talking about that as a 1 year newbie using a personal (no professional 
environment) single machine,
connected on the net, and particularly interested on two aspects of 
security: one is to avoid 'chair-keyboard bugs', that's to say stupid
newbie-type mistakes, the other is to avoid keeping a root terminal 
opened too long to avoid that an attacker attacking for fun will take
root priviledges on my muchine.
So, for me, since a few months I'm using Ubuntu each day, sudo or su 
does not bring a big change in the dayly needs of administration, as it 
is as simple as possible. It's better for me, as I was sometimes 
forgetting, or lazy, to type 'exit' to get out of the root console, 
preceedingly.
On the other hand, I noticed thanks to someone very keen, who pushed me 
very hard to pay attention not to give root priviledges with sudo to 
several binaries that were not needing it, I noticed, on the chan, 
forums and diverse, that more than one, even people used for several 
years, it seems, currently invoke tools with 'sudo' when it is useless.
This is the one danger still present, actually. Administrators under 
Unix type systems are meant to be responsible: able to respond to 
situations. That's not such a bad challenge.
J.Markoll.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20050808/cef779ff/attachment.sig>


More information about the ubuntu-users mailing list