Re: Sudo

[Dan Ritter <dsr@randomstring.org>]

On Sun, Mar 20, 2016 at 04:03:32PM +1100, Keith Bainbridge wrote:
> On 20 Mar 2016, John Hasler <jhasler@newsguy.com> wrote:
> >doug writes:
> >> su allows someone with a root password (and nobody else) to make
> >> system modifications, etc., which might harm the operation of the
> >> system. Sudo basically allows anyone with a user password to do the
> >> same thing
> >
> >No it doesn't.  Only users who have been granted sudo privileges can
> >use
> >sudo and only for the commands permitted them.
> 
> In reality, how many PC s have more than 1 user.  
> 
> If I had users other than myself, I'd think hard about a ding them to sudoers

And there are lots of good config options to make a multi-system
multi-user shared sudoers file worthwhile.

You can make groups of hosts, groups of users, and groups of
commands, and assign them different privileges.

-dsr-