sudo (was Re: basic - continued)

[Smoot Carl-Mitchell]

On Sat, 2010-02-06 at 13:10 -0800, Johnneylee Rollins wrote:

> > My understanding of SU vs SUDO is that sudo lets you do su stuff but
> > leaves behind your name in the records.
> >

sudo does do logging, but unless you have remote logging, a clever
intruder can delete the log entries and thereby cover their tracks.
Functionally, as far as privileges are concerned sudo is similar to su.
However, you can configure sudo to limit the commands (and even
argument) an authorized user is allowed to run.  So it can be a big
security improvement over just granting blanket root access.


-- 
Smoot Carl-Mitchell
Computer Systems and
Network Consultant
smoot at tic.com
+1 480 922 7313
cell: +1 602 421 9005