5 ms·
I think you missed the joke here
by tucnak 2y ago
I think you missed the joke here
- tux3 2y agoI don't think they were joking? I personally tend to leave a root shell open (and both my feet remain largely hole-free to this day), but it's pretty common advice, to avoid accidentally typing something unfortunate like rm ./* into the wrong shell
- tucnak 2y agoYeah, no. If you're going to be doing `rm /` you might as well do `sudo rm /` just as easily. It's the same security model, and honestly the distinction is quite funny.
- tux3 2y agoNo, there's a distinction if you look again. People don't accidentally type sudo in front of commands, but people do type things into the wrong window, or the wrong tab.
- emptiestplace 2y agoThere is no joke here.
- dotancohen 2y agoI missed the joke too. Care to share?
- tucnak 2y agosudo is equivalent to root
- thephyber 2y agoBut it’s not. It’s a subset of what root can do. The entire purpose of the /etc/sudoers file is to configure which users have access to sudo and which commands they can use. Your top comment’s parent didn’t say the ssh login user had all sudo permissions. For best security, there should be many users which each have different limited permissions. Navigating the multiple `sudo su` is frustrating but has a purpose.
- LinuxBender 2y agoThe entire purpose of the /etc/sudoers file is to configure which users have access to sudo and which commands they can use. In all of my career I had seen that at one company. Everyone else just leaves is unrestricted. I would be impressed to see sudo used the way it was intended in more places. Some places even use passwordless sudo and ssh multiplexing which together with simple phishing give unfettered and unlogged access to production.