Security of using sudo rather than su?

Felipe Alfaro Solana felipe.alfaro at gmail.com
Thu Sep 14 18:13:09 UTC 2006


> > 3. Third, I configure sudo so that user's have to supply root password
> > (not theirs).
> >
> Sorry, I just can't see any way that this "improves" security.  If users are
> to be allowed to perform administrative tasks, it is a really, Really,
> REALLY, bad idea to make sudo use the root password.  Then you have to
> _give_ them the root password.  Then they can simply login as root, have
> access to all admin functions, instead of just the ones you want them to
> have, and never have to worry that you're logging their actions.  This is
> not security.

For servers where there are multiple administrators, sure this is not
a good idea. However, I was talking about single-user machines, like
desktop machines.




More information about the ubuntu-users mailing list