Hello,

I have a question about system security.  I have an idea and I was hoping 
that someone could tell me whether it's good or bad.

For a single-user computer, I would normally have only two accounts: root 
and (say) 'dcarrera' -- a regular user account.  Since I install stuff 
very often, I would add 'dcarrera' to the 'wheel' group, so I can su to 
root.

Now, here is my idea.  Create a third user, 'admin'.  Add 'admin' to the 
'wheel' group instead of dcarrera, but give admin the ability to install 
regular packages.  In other words, admin would have write access to /usr.

So, when I want to install a regular package I would su to admin.  And 
when I need to do something more (like modify /etc, /boot, /bin, etc) I 
would su again to become root.

I figure that this would be good because 'admin' would not be able to 
access any of the truly crucial components of the system.

Would this be a good idea?

Thanks for the help.
-- 
Daniel Carrera
Graduate Teaching Assistant.  Math Dept.
University of Maryland.  (301) 405-5137

--
[EMAIL PROTECTED] mailing list

Reply via email to