On 02/07/2012 02:08 PM, Steven Stern wrote:
I keep meaning to edit the sudo config files to block things like
sudo su -
sudo bash
but I get lazy. Someday, this will bite me in the ***.
There's a much better, easier way to prevent that: don't activate sudo
unless there are people using your box that need to do specific admin
tasks but don't have the root password. And, if you do give them sudo
access, limit it to the commands they actually need to be using because
if you don't, giving them sudo access is exactly the same as giving out
the root password.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
