[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [RFC] disabled root account / distinct group for users with administrative privileges



* Vincent Danjean <vdanjean.ml@free.fr> [101020 09:46]:
> > How about the "root" group?
>
> This would hurt systems where umask is 002 (or 007) by default (the root
> group is the primary group of the root user with nobody else in it)

No, the root group (aka wheel) group is the group of people that are
allowed to switch to root if not everyone allowed to (pam_wheel, ...).

Nothing should assume that on a random system only root is in group
root.

	Bernhard R. Link


Reply to: