Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.140
X-Spam-Level: *
X-Spam-Evidence: '*H*': 0.75; '*S*': 0.03; 'root,': 0.09; 'cc:addr :python-list': 0.11; 'jan': 0.12; 'finer': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'sudo': 0.16; 'sure.': 0.16; 'wrote:': 0.18; 'thu,': 0.19; 'cc:addr:python.org': 0.22; 'commands,': 0.24; 'cc:2**0': 0.24; 'van': 0.27; 'header:In-Reply-To:1': 0.27; 'point': 0.28; 'message-id:@mail.gmail.com': 0.30; 'run': 0.32; 'but': 0.35; 'received:google.com': 0.35; 'passwords': 0.36; 'too': 0.37; 'pm,': 0.38; 'users': 0.40; 'even': 0.60; 'accounts': 0.64; 'nobody': 0.68; 'subject:Hello': 0.72; 'cut': 0.74; 'power': 0.76; '2015': 0.84; 'commands.': 0.84; 'albert': 0.91; 'subject:World': 0.91; 'to:none': 0.92
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=0YmTtvvCYSELzZmAcIrfr2Lk649GfvIMgKuAyo/V1MI=; b=aFRo65piWvJlQrgyb4A5cqPNDPArwuBKVU5AYf3QT9Ah0fkAHtx1Ztfi/ntXoKfH0t KB3OjNW9pCvqzwzfYD8MSSX/NVlAZnIonM370ds1T63GIopcCfqd0UNqyy4kEVmPKTvq FOaTdgCq6cbn6AyzzPJNplB288YICLRd/BBawqWF77GlYYrdItmfoR+NjdqgANvx3LwO IrsyCsF772aaOQiqDX4oWlc4/2CZpUKdYkyeRTyvUSSjWIFc3/1GrTD1U/25cDBApTM5 DZgSE6ckMyu+wQnT4dJYB/3cpS8+aycsKY/6sHXaxBqMC8/Este0/oBdgZEo0cl21nDv ZY4Q==
MIME-Version: 1.0
X-Received: by 10.107.7.94 with SMTP id 91mr8619246ioh.27.1420721618745; Thu, 08 Jan 2015 04:53:38 -0800 (PST)
In-Reply-To: <54ae7b75$0$15900$e4fe514c@dreader35.news.xs4all.nl>
References: <54957226$0$12975$c3e8da3$5496439d@news.astraweb.com> <CAPTjJmpVK4L-1kBVywd4o=mXFN=iWhjJzWZbxZDgw3nfK8WbSQ@mail.gmail.com> <m75pfm$2ah$1@ger.gmane.org> <mailman.17077.1419144290.18130.python-list@python.org> <54ae7b75$0$15900$e4fe514c@dreader35.news.xs4all.nl>
Date: Thu, 8 Jan 2015 23:53:38 +1100
Subject: Re: Hello World
From: Chris Angelico <rosuav@gmail.com>
Cc: "python-list@python.org" <python-list@python.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.17471.1420721626.18130.python-list@python.org>
Lines: 23
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1420721626 news.xs4all.nl 2969 [2001:888:2000:d::a6]:53091
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:83328

On Thu, Jan 8, 2015 at 11:43 PM, Albert van der Horst
<albert@spenarnc.xs4all.nl> wrote:
> I don't trust sudo because it is too complicated.
> (To the point that I removed it from my machine.)
> I do
> su
> ..
> #
> su nobody
>
> Who needs sudo?

With sudo, you get MUCH finer control. I can grant some user the power
to run "sudo eject sr0", but no other commands. I can permit someone
to execute any of a large number of commands, all individually logged.
I can allow sudo to other users than root, without having to reveal
those accounts' passwords (chances are they don't even have
passwords).

But sure. If you want to cut out complication, dispense with user
accounts altogether and run everything as root. That's WAY simpler!

ChrisA