Re: Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-11-01 Thread Joe Block
Phil Brutsche wrote: sudo rocks, btw. It should be standard equipment on any and all Linux/unix systems. But only on OpenBSD is that so :( Fyi, MacOS X public beta ships with sudo as well. jpb -- Joe Block [EMAIL PROTECTED] University of Central Florida School of Optics/CREOL

Re: Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-11-01 Thread Ethan Benson
On Tue, Oct 31, 2000 at 10:50:17PM -0600, Phil Brutsche wrote: There's also the side benefit that you can give limited root access to people you only sorta trust with administrative duties, especially since you don't need to give out the root password anymore :) its actually very limited

Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-10-31 Thread Damon Muller
Quoth kmself@ix.netcom.com, I use a fairly liberal sudoers setting for my personal account. Yes, this means that I'm usually only a few keystrokes away from being root -- but that's what I'm after. And a password is still required. I'm of the same opinion with regard to sudo. Basically, if

Re: Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-10-31 Thread Damon Muller
Quoth Damon Muller, Quoth kmself@ix.netcom.com, I use a fairly liberal sudoers setting for my personal account. Yes, this means that I'm usually only a few keystrokes away from being root -- but that's what I'm after. And a password is still required. I'm of the same opinion with

Re: Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-10-31 Thread William T Wilson
On Wed, 1 Nov 2000, Damon Muller wrote: Without actually knowing your password, which sudo requires, having your account *isn't* equivalent to having root. It's certainly possible to build a rootkit style setup which would be suitable for converting a privileged account into root. What if I

Re: Security of sudo [was: Re: /usr/bin before /usr/local/bin?]

2000-10-31 Thread Phil Brutsche
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A long time ago, in a galaxy far, far way, someone said... I'm of the same opinion with regard to sudo. Basically, if you're the sort of person who never passes your password over the network in plaintext (ie., ssh, apop, etc.), then it's unlikely