Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?

From	Jimmy Johnson <field.engineer@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?
Date	2019-06-23 01:50 +0200
Message-ID	<ybXVD-7Vl-3@gated-at.bofh.it> (permalink)
References	<yaH6y-17a-5@gated-at.bofh.it> <yaXEl-2SC-3@gated-at.bofh.it>
Organization	PC Repair

Show all headers | View raw

On 06/19/2019 09:56 PM, Bagas Sanjaya wrote:
>> That is almost as bad as having no security restrictions at all. The
>> correct thing to do would be to set permissions on the programs to
>> allow them to be run by group remaja.
> What I thought that the correct way is to configure sudoers so that 
> remaja group can access programs that they absolutely required via sudo 
> (e.g. mount for mounting USB sticks).
> 
>> I don't say this often. I would immediately fire the person
>> responsible for instituting this policy on a "production" system. (It
>> would be a good policy if the system is intended as an educational
>> environment to allow the teens to ruin things, and learn from
>> experience.)

> In fact, many television stations have most programs written for teens 
> (age 13 and older), so sysadmins there configure sudoers which allows 
> teens to behave like sysadmins themselves (by giving them full 
> administrator privileges) on their production systems. Also, parental 
> monitoring and guidance can reduce likehood of teens breaking such 
> systems. Maybe because teens are largest marketshare for TVs.


Some one mentioned mounting drives, all that and what they need can be 
configured.  There is no reason to give /sudo/root/ to anyone but the 
admin, unless it's a class on system admin.  What are you going to do 
about it?
-- 
Jimmy Johnson

Devuan Jessie - KDE 4.14.2 - AMD A8-7600 - EXT4 at sda2
Registered Linux User #380263

Thread

Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-19 06:30 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? john doe <johndoe65534@mail.com> - 2019-06-19 08:00 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-19 08:10 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-19 13:40 +0200
    Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 07:20 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-20 07:40 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 09:20 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-20 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-20 14:10 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-20 13:00 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 14:50 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-20 18:40 +0200
            Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl Fink <carlf@panix.com> - 2019-06-21 21:50 +0200
              Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 01:00 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 04:30 +0200
                Re: Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 10:40 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 17:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Brad Rogers <brad@fineby.me.uk> - 2019-06-22 18:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 18:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 18:50 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-22 14:20 +0200
              Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 02:40 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 10:10 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 11:50 +0200
                Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 12:30 +0200
                Re: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-22 12:40 +0200
                Off-topic: Action [Was: Re: Off topic: remaja (teens) Erik Christiansen <dvalin@internode.on.net> - 2019-06-22 13:40 +0200
                Re: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-22 23:40 +0200
                Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 01:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 01:50 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 03:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 09:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 10:00 +0200
                Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 10:50 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 16:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) rhkramer@gmail.com - 2019-06-23 18:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic:  remaja (teens) Curt <curty@free.fr> - 2019-06-23 18:30 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 19:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-23 11:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 12:30 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Georgios <gpdsbe@mailbox.org> - 2019-06-23 20:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 22:50 +0200
                Re: Off topic: Carbon. John Hasler <jhasler@newsguy.com> - 2019-06-23 23:10 +0200
                Teenagers (was: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?) rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:30 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Jimmy Johnson <field.engineer@gmail.com> - 2019-06-23 01:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-23 02:10 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-23 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-24 02:40 +0200
            Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-24 02:50 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-25 06:00 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? mick crane <mick.crane@gmail.com> - 2019-06-25 09:10 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Aidan Gauland <aidalgol@fastmail.net> - 2019-06-25 10:00 +0200
      Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-25 10:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-25 14:50 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? andreimpopescu@gmail.com - 2019-07-02 14:50 +0200

csiph-web