On Sat, 7 Jul 2018 11:34:11 +0100
The Natural Philosopher wrote:
> On 06/07/18 19:47, Ahem A Rivet's Shot wrote:
> > On Fri, 06 Jul 2018 18:00:17 GMT
> > Jan Panteltje wrote:
> >
> >> I remember Linus (from Linux) saying something along those lines too
> >> not so long ago.
> >> Way too much root fear, and silly warnings.
> >
> > Agreed, having a root account that can't be logged into makes a
> > lot of sense on servers owned by a business and maintained by several
> > people because using sudo provides an audit trail of who did what with
> > root permissions.
>
> Except that its trivial to set a root password if you have full sudo
> rights
It is also easy enough to write a sudoers file that does not permit
running passwd or a shell (or visudo). A well maintained sudoers file is one
mark of a properly managed server.
--
Steve O'Hara-Smith | Directable Mirror Arrays
C:\>WIN | A better way to focus the sun
The computer obeys and wins. | licences available see
You lose and Bill collects. | http://www.sohara.org/
--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | FidoUsenet Gateway (3:770/3)
|