As everybody know, be connected as root is evil/bad.
But you may want to have a special user that can do some maintenance
task ( using mdk tools ) but who don't have all of the power of root.

Can this could be accomplish ? IMHO, yes.

1°/ during installation you specify the admin user,, or better you click
"Add Admin user" and then type password.

2°/ sudo should be configure so that this user can launch WITHOUT root 
password all drakxtools, printer administration tools. If some
drakxtools need to be launch only by root they should prompted a dialog
box and ask for root password. If you can detect when a user is sudoed,
it's just a matter of performing some checks, if this is impossible,
then it should ask for this password every time.

3°/ the desktop of this user should be customized. Under KDE with
superkaramba you have mandrakesecure theme so that he can see security
advisories. Under gnome, he's got the gdesklet equivalent.
mutray could be also installed. The same for evolution summary ( summary
screen ).

4°/ Instead of Mandrake galaxy, the Admin user should see a wizard a
little bit like the Windows 2000/2003 one which propose several task to
do. This wizard should have blue color as this is Mandrake colors and be
task oriented.

5°/ in order to avoid conflict with user custom group, this Admin user
could belongs to adm group, or root group ...

Advantages :
- joe user connect with Admin account and manage the computer with admin
account. As Admin user doesn't have all the right root have, possible
damages will be less important : a "rm -fr" in / will have less
consequences ;)
- joe user only need to know root password for very specific task (
kernel recompilation, driver installation, software compilation ).
- we have an account we can customize and where we will be able to show
all needed informations ( security advisories, logs, security email, ...
)

---  
ya du split dans l'air :)  le split c'est la faute aux newbies  c koi
newbies #mandrakefr


Reply via email to