Re: sudo security Was: Reporting missing package during install
* On 2013 10 Dec 05:10 -0600, Gian Uberto Lauri wrote:
> That's the point. Current sudo default configuration is "bad". That
> 4does not means that the whole sudo program is bad (except that for
> Italian speakers it smells(*) :)). Does not add security but adds
> potential harms.
Have you filed a wishlist bug report against the sudo package explaining
your concerns about the defaults and suggesting better defaults? It's
not likely that the sudo package maintainer is reading this list so
venting here is not likely to get the defaults changed. Be prepared for
the possibility that the maintainer will not agree with your position.
BTW, I am not a Debian Developer, just a Debian user. I have filed some
bug reports over the years. Some are acted on quickly, others seem to
be ignored, and some end up being resolved upstream.
If your complaint is simply that Debian even allows the option of a
single user account with sudo enabled rather than forcing separate root
and user accounts, then even I would resist the removal of the option.
- Nate
--
"The optimist proclaims that we live in the best of all
possible worlds. The pessimist fears this is true."
Ham radio, Linux, bikes, and more: http://www.n0nb.us
Reply to: