[nylug-talk] sudo vs 'ssh as root'

Marco Romeny marco.romeny at gmail.com
Wed Jul 11 17:39:12 EDT 2007


On 7/11/07, Marco Romeny <marco.romeny at gmail.com> wrote:
> On 7/9/07, Michael Hrivnak <mhrivnak at triad.rr.com> wrote:
> > watch them and possibly answer prompts.  With sudo, you can allow him or her
> > to run only "aptitude" and "reboot" as root.  That gives the intern all the
> > privileges necessary to get the job done, while limiting his or her ability
> > to poke around other places and potentially break something.

And below said, I still think sudo with separate privileges is a
fairly good compromise
to security/convenience....


>
> If I were an evil intern I would pack up a Cray-C Hax0r .deb and install it with
> aptitude:)   Luckily, most interns love their offices...
>
> Hooray for rain!
>


-- 
+++++++++++++++++++++++
Marco ter Haar Romeny
Email:marco.romeny at gmail.com
Tel: +1 917 945 2978


More information about the nylug-talk mailing list