Security of using sudo rather than su?

[Alan McKinnon]

On Thursday 14 September 2006 19:45, Adam Funk wrote:
> What's the practical difference in effect (I mean beyond what
> appears in /etc/shadow) of passwd -d and passwd -l?  Is it
> just that the effect of -l can be reversed back to the
> previously valid password?

Pretty much. Both options are provided so that root can do 
either. 

-d is also useful if you have a situation where a system user 
(like bin or apache) somehow got a password. I had this with a 
database product and the manual said to useradd a user with 
login abilities. Later on I realised the db could run as a 
daemon so I hacked the startup scripts and did -d on the db 
owner account

alan