Re: Sudo and other root-based security issues

1999-10-19 Thread John Hasler
David J. Kanter writes: > But since some commands require root access, and it's a pain to su root > all the time, how secure is it to run sudo on something like wvdial or > slrnpull? wvdial should not require root if your user is in group dip (wvdial may also require 'dialout': pon does not). I'v

RE: Sudo and other root-based security issues

1999-10-19 Thread Bryan Scaringe
Actually, how a cracker will typically try to get in is by exploiting security holes in deamons that listen to network ports. These programs USUALLY run as root. Logging in as root presents little-to-no additional risk. If your system security is weak, logging-in as root wont cause much addition

Sudo and other root-based security issues

1999-10-19 Thread David J. Kanter
>From what I've read, I'm relatively pertrified to use my root account unless absolutely necessary, like configuring X or setting up my MTA. (There are only two users here, me and root.) But since some commands require root access, and it's a pain to su root all the time, how secure is it to run s