On Tue, Oct 19, 2010 at 9:49 AM, James Mckenzie <jjmckenzi...@earthlink.net> wrote: > Tomas Hajek <tha...@kettering.edu> wrote:
>>I have to disagree with "sudo su - is stupid." > Given all of the information in this thread and rethinking my position, I > have to agree. > You can block this if needed in the sudoers file. > Thus a user with sudo privileges could (in theory) be denied the ability to >run su. If a user can sudo to root, he/she can run su, at the very least through the "-i" and "-s" options. > There are somethings in UNIXy systems that can only be done from console and > as root. I've never tried disabling root in Fedora, but you're logged in as root in recovery mode in Ubuntu (and Debian if you disable root) - so you can be root at the console through sudo or runlevel S without having an explicit root login. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
