2 ms·
You can disable direct root login and force users to login as their own account first. This way, any root login is tracked—you know who logged in as root, becau
by klodolph 3y ago
You can disable direct root login and force users to login as their own account first. This way, any root login is tracked—you know who logged in as root, because they had to log in as their own account in order to run su.
- rvnx 3y agoIn such case: sudo su, then. and let sudo verify that the user belongs to the group of allowed sudoers. No need for the password to the root account.
- rollcat 3y agoObjection: su is a very simple program that does (approximately) one thing. Meanwhile the sudoers(5) man page starts with an introduction to EBNF grammars. I strongly prefer doas wherever it's available.