Re: securing debian

[Ben Pfaff <pfaffben@pilot.msu.edu>]

   this is a no go,i dont want to install this package because i dont want to
   give root access to my brother:

   Sudo is a program designed to allow a sysadmin to give limited root
   privileges to users and log root activity.  The basic philosophy is to
   give
   as few privileges as possible but still allow people to get their work
   done.

But you don't have to give root access to your brother.  Sudo lets you
set up access by username, in the /etc/sudoers file.  i.e., on my
system:

    # User privilege specification
    root	ALL=(ALL) ALL
    blp     ALL=(ALL) ALL

So no one but root, blp can take advantage of sudo, and anyone else
who tries will get a message logged in syslog saying that they tried.


--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org