Your user "george" has administrative privileges as long as he preceded his commands with 'sudo'. Whenever he does that his password is asked unless he executed another command with 'sudo' little time ago. If 'sudo' does not precede a command requiring administrative privileges (the last command you show us) then the command is aborted. You do *not* "run as Administrator all the time". This is what *you* observed. There is *no* problem. Also, there is no "admin" group on your system (the 'adduser' command is pretty clear about that). This is normal.

Of course, if an attacker discovers george's password, then she got administrative privileges too. But the same holds if this attacker discovers root's password in a system where root is the one only user who performs administrative tasks. There is no reason it would be harder to discover george's password rather than root's. Quite the opposite in fact: because he has to remember two (rather than one) passwords, there is a good chance that george chose weaker passwords!

Reply via email to