<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Sorry Brian I disagree with this. Sudo allows people to have priveleges
that can be logged against their user account. One reason we use it is
so our DBA's can administer some aspects of Sybase that would normally
require root access. No way will we share the root password around, so
sudo assists in this area and saves the cost of having a DBA and
SysAdmin have to do everything together. Couple this with scripted
menus and there's little damage they can do, but certain tasks are
devolved for efficiency.<br>
<pre class="moz-signature" cols="72">Kind Regards Russ
<a class="moz-txt-link-abbreviated" href="http://www.windsorcycles.com.au">www.windsorcycles.com.au</a>
(gedit/ubuntu/gFTP)
</pre>
<br>
<br>
Brian Astill wrote:
<blockquote cite="mid200504181652.39163.bastill@adam.com.au" type="cite">
<pre wrap="">On Sun, 17 Apr 2005 01:01, Pierfrancesco Caci wrote:
</pre>
<blockquote type="cite">
<pre wrap="">:-> "Brian" == Brian Astill <a class="moz-txt-link-rfc2396E" href="mailto:bastill@adam.com.au"><bastill@adam.com.au></a> writes:
> sudo is dangerous and also awkward for anything other than an
> occasional
You should tell us all why sudo would be more dangerous than having a
root login enabled. Please.
</pre>
</blockquote>
<pre wrap=""><!---->
I can't understand why you don't understand! :-)
The standard Unix way of doing things is for root to own the system and
to allow users to use that system subject to not being allowed to mess
about with it
Root is all-powerful. I have known some paranoid people who would not
operate as root without first disconnecting from the network and the
internet - and then would not leave the system unattended until their
root work was finished. They were (overly?) concerned that someone
might break in electronically or physically and wreak havoc.
In any event, one does NOT operate as root on a day-to-day basis. You
set up a personal account for normal usage.
Sudo is an emergency privilege sort of thing. Root might be going on
holiday and need someone to run things while they are away. Granting a
sudo allows the "assistant" to run the system as root WITHOUT root
having to reveal root's password to them. The sudo privilege can be
revoked by root at any time.
The problem with sudo privilege is that you are always effectively
running as root - all anyone has to do is type "sudo" before any
command they wish to use - even "sudo rm -fR /* - to do whatever they
wish with your system. NOT secure.
</pre>
</blockquote>
</body>
</html>