Sabuj Pattanayek wrote:
IIUC, sudo is intended to provide limited and temporary root access to
specific functions that are configurable by the actual root account,
sudo can be setup to run any program as any user not just as root.
while su is not configurable and provides 100% root access. Is that
basically correct?
I can see the utility of sudo, but I'd rather just use su and suffer
the consequences of screwing up. (a.k.a. "learn something while fixing
a screwup.")
from a security perspective, having to run su - forces the user to
know another password (the root password). On most distributions
/etc/pam.d/su can be setup to only allow users in the wheel group to
"su -", and again then only if they have the root password (pam.d/su
can also be setup to su - without a password I think).
Yes you can set up sudo without asking a password.
Sudo is also nice to give other users limited access, i.e. I have one
user who has access to controlling users.
Apple OS-X uses sudo under the hood. By default sets up the original
user with sudo root privileges, but does ask the password.
--
Jerry Perkins - http://jperkins.us/
Calling an illegal immigrant an undocumented worker
is like calling the corner drug dealer an unlicensed Pharmacist.
--
You received this message because you are subscribed to the Google Groups
"NLUG" group.
To post to this group, send email to nlug-talk@googlegroups.com
To unsubscribe from this group, send email to
nlug-talk+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/nlug-talk?hl=en
