Mailinglist Archive: opensuse-factory (905 mails)
| < Previous | Next > |
Re: [opensuse-factory] sudo
- From: "Carlos E. R." <robin.listas@xxxxxxxxxxxxxx>
- Date: Mon, 2 Jun 2008 14:23:04 +0200 (CEST)
- Message-id: <alpine.LSU.1.00.0806021412240.32145@xxxxxxxxxxxxxxxx>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The Monday 2008-06-02 at 13:08 +0200, Ludwig Nussel wrote:
I agree that it serves a purpose, but it does defeat the idea of using root commands without knowing the root password. It defeats the idea of the real root determining what commands he allows his minions to use, and only those commands.
That configuration may makes sense for a single user, that is also root,
which is also the idea behing them having the same password, as you said.
Of course, you have to configure what commands to allow, one by one. That's the idea ;-)
Of course I did that, ages ago :-)
But if I do know the root password, I don't bother about sudo; as much as I dislike using "su -c command" I also dislike "sudo command". I simply type "su -" once and then do as I please :-) .
- -- Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
iD8DBQFIQ+YrtTMYHG2NR9URAodrAJ0dHojvVgIdiIZnscElKInw1Oq6KwCfQR8a
TSG+ipWPVjHWlfeVmsLhfyQ=
=faIc
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
Hash: SHA1
The Monday 2008-06-02 at 13:08 +0200, Ludwig Nussel wrote:
Carlos E. R. wrote:
The main purpose of sudo is to allow non-root to use root commands,
without having to give them all the power that comes with knowing the root
password. This is defeated by the install configuration.
The default config doesn't defeat anything. It merely makes sudo
usable without configuration (sudo would issue a fake password
I agree that it serves a purpose, but it does defeat the idea of using root commands without knowing the root password. It defeats the idea of the real root determining what commands he allows his minions to use, and only those commands.
That configuration may makes sense for a single user, that is also root,
which is also the idea behing them having the same password, as you said.
prompt and then complain by default if those two lines you dislike
weren't there).
Of course, you have to configure what commands to allow, one by one. That's the idea ;-)
Think of it as su without stupid shell quoting
problems. If you've already read the sudo manpage and therefore
found out how to allow certain operations without root
authentication feel free to run "sudo visudo" and change the config
to your liking ("su -c visudo" if you want to boycot the default
behavior ;-).
Of course I did that, ages ago :-)
But if I do know the root password, I don't bother about sudo; as much as I dislike using "su -c command" I also dislike "sudo command". I simply type "su -" once and then do as I please :-) .
- -- Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
iD8DBQFIQ+YrtTMYHG2NR9URAodrAJ0dHojvVgIdiIZnscElKInw1Oq6KwCfQR8a
TSG+ipWPVjHWlfeVmsLhfyQ=
=faIc
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
| < Previous | Next > |