Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #231273

Re: Sudo ... use or delete?

From Eike Lantzsch <zp6cge@gmx.net>
Newsgroups linux.debian.user
Subject Re: Sudo ... use or delete?
Date 2021-01-29 18:40 +0100
Message-ID <BCFUu-1co-7@gated-at.bofh.it> (permalink)
References <BCDpD-84t-3@gated-at.bofh.it> <BCDIZ-8qb-1@gated-at.bofh.it> <BCEc2-7Q-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Friday, 29 January 2021 12:42:19 -03 tomas@tuxteam.de wrote:
> On Fri, Jan 29, 2021 at 08:12:20AM -0700, Antonio Russo wrote:
>
> [...]
>
> > But, more specifically to your question about sudo, let me argue
> > that, at the level of paranoia required to be worried about sudo,
> > you should also be worried about a LOT of other packages [...]
>
> I do appreciate and use sudo -- for me it reduces embarrasing
> fat-finger mistakes significantly.
>
> But it's not everyone cup of tea, and to be fair, there's one
> current privilege escalation vulnerability [1] around. It seems
> easily fixable (Debian has a fixed version out, if you do use
> sudo, check with [2]).
>
> So if you aren't using <foo>, it's wise to not install <foo>.
> Complexity kills :-)
>
> Cheers
>
Hi,
IMHO sudo within itself is not dangerous but the user/admin is. Sudo has
a huge potential to be misconfigured and as a consequence to break down
all and every safety barrier. Sudo is a very good tool - to shoot
oneself into the foot.
Good read: Sudo Mastery by Michael W. Lucas
Cheers to y'all

--
Eike Lantzsch ZP6CGE

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Greg Wooledge <wooledg@eeg.ccf.org> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 16:20 +0100
    Re: Sudo ... use or delete? <tomas@tuxteam.de> - 2021-01-29 16:50 +0100
      Re: Sudo ... use or delete? Eike Lantzsch <zp6cge@gmx.net> - 2021-01-29 18:40 +0100
        Re: Sudo ... use or delete? Roberto C. Sánchez <roberto@debian.org> - 2021-01-29 19:30 +0100
          Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
  Re: Sudo ... use or delete? Teemu Likonen <tlikonen@iki.fi> - 2021-01-29 17:00 +0100
    Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:00 +0100
      Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 17:00 +0100
        Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:30 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 18:10 +0100
  Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-30 14:30 +0100

csiph-web