ssh and tty and sudoers file.

Derek Broughton news at pointerstop.ca
Tue Aug 19 16:13:56 UTC 2008


Brian McKee wrote:

> On Tue, Aug 19, 2008 at 1:22 AM, Knapp <magick.crow at gmail.com> wrote:
>> The original idea was that if you get hacked somehow (weak keys comes to
>> mind from that programming error) then the hacker is not allowed to use
>> su (turned off)or sudo (limited to localhost use only).
>>
>> You could do what you say but that would make it so that if you needed
>> sudo you must sign out of your normal account and sign in as a sysop.
>> Sudo was made to avoid that in the first place.
> 
> As opposed to signing off and moving to the console to log in locally?

No, as opposed to signing off and using a shared password to log into the
root account.

> Not sure I see the gain unless it's more of a single user box than a
> server, but note my last suggestion

And this particular advantage of sudo is only really applicable to servers.

-- 
derek





More information about the ubuntu-users mailing list