3 ms·
How else would you do things as root or superuser without exposing everything? If your sudo configuration is ALL = ALL (or is a variant of this), then sudo open
by AnonC 3y ago
How else would you do things as root or superuser without exposing everything? If your sudo configuration is ALL = ALL (or is a variant of this), then sudo opens everything up for use/abuse. But if you carefully construct the configuration to allow only certain commands, it’s much better than just giving out the root password to users.
- charcircuit 3y ago>How else would you do things as root Nothing a user is supposed to do should require elevating to root to do. >it’s much better than just giving out the root password to users. This is even worse. Access control should be set up properly instead of having users assume the identity of other accounts.
- gitaarik 3y agoAnd so how do you then configure a server? Like modifying the files in /etc/
- charcircuit 3y agoThere are several different options 1. Don't. Just include the correct configuration as part of the OS. 2. For a configuration file use a group for passing out write access to users on the system. 3. Have a daemon which handles updating configuration files based off some central source of truth which pushes changes to a fleet of servers. Programs could directly communicate with this daemon to get their configuration.