4 ms·
There's one very good reason to use sudo instead of being in a root shell: audit trails. sudo logs its invocations. While you could always see who is becoming r
by organman91 10y ago
There's one very good reason to use sudo instead of being in a root shell: audit trails. sudo logs its invocations. While you could always see who is becoming root, you'd have to look through root's shell history to see what's happening (which isn't hard to purge - one of the many reasons a remote syslog server may be called for).
- sliken 10y agoWhy not enable auditing?
- brainfire 10y agoWhy enable auditing when you already get the information you want with your current setup?
- sliken 10y agoBecause sudo only works when you sudo, it's just one more thing to type/mistype. Do you really want to pay your sysadmin to sometimes run sudo and sometimes have logging? Or would you rather automate it and get 100% logging?
- brainfire 10y agoWho's implementing it and why would it cost me less than paying a sysadmin to use sudo?
- LoSboccacc 10y agoSudo su