[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: permisions in the /dev directory



Thank you for the advice, Andrew and James!

Yes, I am on my own box!
---
Scotty

On Tue, 07 Sep 2004 12:40:08 +0200, James Allen <jfallen@gmail.com>
wrote:

>On Tue, 07 Sep 2004 05:41:28 -0400, Andrew Schulman
><andrex@alumni.utexas.net> wrote:
>> > To let a user run any command with sudo add a line such as the
>> > following:
>> > username         ALL = (ALL) ALL
>> 
>> This is a terrible idea.  It essentially makes username equivalent to root.
>> Yes, the user has to type 'sudo' before they can do the damage, but these
>> things can become a habit (or a shell alias) in a hurry, and access to
>> username's account also becomes instantly equivalent to being rooted.
>
>In most cases I would agree with you. The above was an example. But I
>take it from Scotty's first post that it was for himself to do
>administration on his own box and not setting this for everybody. sudo
>is for administration.
>
>The following is another example:
>
># User alias specification
>
>User_Alias     ADMINS = msmith, amccord
>
># Cmnd alias specification
>
>Cmnd_Alias     DUMP = /sbin/dump
>
># User privilege specification
>
>root           ALL=(ALL) ALL
>ADMINS    DUMP
>
>
>-- 
>To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
>with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: