11 ms·
Sudo serves one purpose well: for admin users to become root with an audit trail. Why in 2020 do we still have non admin users on a host? Services! I still
by gorgoiler 6y ago
Sudo serves one purpose well: for admin users to become root with an audit trail.
Why in 2020 do we still have non admin users on a host? Services! I still have non-admin users on my hosts for www, databases, etc.
Without sudo, the alternative would be for ssh to PermitRootLogin which is theoretically safe if root has a strong password etc, but in practice — should there ever be a bug in openssh that exploits permissive root logins — would needlessly expose systems to such a bug.
- em-bee 6y agothe problem with sudo is that it requires a password. on servers i use ssh keys to log in. i want that audit trail too, but either i set up sudo without a password, or i have to manage a user password as well. on some systems i thought to use ssh locally with a key, but then i need PermitRootLogin which doesn't distinguish between local and remote logins.