[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shared root account



Eric E Moore <e.e.moore@shef.ac.uk> writes:
> Ok, the amount of aiming away from your foot that you can do with
> giving someone priveleges by giving them the root password is a proper
> subset of the aiming away from your foot that you can do when
> granting priveleges through sudo.

Think of a daemon (vtund in this case) that needs to reconfigure
interfaces at run time. With sudo, said daemon can run under his own
uid and can call ifconfig as root. Definitely better than 'uid 0' all
the time. 



Reply to: