Mailinglist Archive: opensuse-factory (883 mails)
| < Previous | Next > |
Re: [opensuse-factory] Roles for security and convenience
- From: Hans Witvliet <suse@xxxxxxxxxxx>
- Date: Sat, 26 May 2012 01:07:49 +0200
- Message-id: <1337987269.4431.202.camel@t43.lan0.a-domani.nl>
On Thu, 2012-05-24 at 18:56 -0300, Claudio Freire wrote:
That means that dedicated user-account, instead of groups.
And the idea was, that
a) if you are the single user & owner you don't want to be bothered with
the concept of other accounts and certainly not the root-pwd (Linus
variant)
b) in a large company specific roles are assigned to certain users,
Those users should only be troubled with their own pwd, and should never
have access to neither root-pwd nor root-privileges.
Dedicated accounts with their own pwd are a nightmare for an
organisation.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx
On Thu, May 24, 2012 at 3:54 PM, Robert Schweikert <rjschwei@xxxxxxxx> wrote:
* "Admin configured server": you need the root password for all
changes
-> basically like in good old times before polkit and friends:
you'll
need to "su -" and then use yast or whatever to change stuff.
This one should allow the admin to grant some users some rights, and
instead of asking for root password, those users would be asked for
their own.
That means that dedicated user-account, instead of groups.
And the idea was, that
a) if you are the single user & owner you don't want to be bothered with
the concept of other accounts and certainly not the root-pwd (Linus
variant)
b) in a large company specific roles are assigned to certain users,
Those users should only be troubled with their own pwd, and should never
have access to neither root-pwd nor root-privileges.
Dedicated accounts with their own pwd are a nightmare for an
organisation.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx
| < Previous | Next > |