[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [RFC] disabled root account / distinct group for users with administrative privileges



Carsten Hey writes ("Re: [RFC] disabled root account / distinct group for users with administrative privileges"):
> A group named sudo or sudoroot is somehow linked to sudo as tool used to
> gain administrative privileges.  No one knows if in future an other tool
> will be the de facto standard to gain privileges, as sudo is now, and
> having a group sudoroot whose members are allowed to gain to become root
> using an imaginary suto command sounds wrong.

Speaking as the author of a program ("really") which would also want
to use the same group, I have no problem at all with a group name
which mentions sudo specifically.  This is probably the best way to
ensure that the name is meaningful and not used elsewhere for
something else.

"sudoroot" is better than "sudo", as there already is a sudo group and
therefore people may already be using it for something else.

> As admin already has been discussed and some people raised possible
> disadvantages, what about using an abbreviation of the word privileges,
> i.e., priv as group name?

I wouldn't be at all surprised to find that "priv" was occasionally
used as a username for an ordinary user.

Ian.


Reply to: