4 ms·
Instead of doing system administration with root, couldn't we have a system user with the same privileges as root except it wouldn't have write access to the fi
by blaze33 10y ago
Instead of doing system administration with root, couldn't we have a system user with the same privileges as root except it wouldn't have write access to the files of some users (like your clients) ?
So you could still rm -rf / all you want, delete everything but still have /home or /var/www content untouched.
We run certain programs with limited privileges to mitigates risks (bugs, exploits, etc.), why shouldn't we also limit the privileges of root to mitigates the risk of buggy system administration ?
Obviously having actual backups and testing your code before applying it to production is good practice but I feel like doing system administration with root while having potential bugs in your sysadmin code (as in any other software) leaves the door open to the next catastrophic failure.