Re: sudoers question

From	<tomas@tuxteam.de>
Newsgroups	linux.debian.user
Subject	Re: sudoers question
Date	2023-05-13 12:30 +0200
Message-ID	<GuUFI-8B5f-13@gated-at.bofh.it> (permalink)
References	(4 earlier) <GuA4h-8mre-1@gated-at.bofh.it> <GuA4h-8mre-7@gated-at.bofh.it> <GuDbP-8oec-5@gated-at.bofh.it> <GuDbP-8oec-3@gated-at.bofh.it> <GuSXg-8zZZ-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sat, May 13, 2023 at 10:35:31AM +0200, Michel Verdier wrote:
> Le 12 mai 2023 tomas a écrit :
> 
> >> > `sudo bash` anyone?
> >> 
> >> also quicker done with
> >> su -
> >
> > But not the same.
> 
> Which differences do you see ?

For su, you have to enter the root password. For sudo, there
are many options, depending on config. Typically you enter
yours.

Plus, you can configure which commands (and args) can be done
by whom, based on user id, local or remote, etc.

OTOH the sudo system is way more complex than simple su, so
there's more place where bugs can hide (it has had actual
issues, btw).

Security is engineering: always looking for a good tradeoff.
Not magic.

(That's why I cringe when people around here scaremonger about
"you NEED to have a password" and things. People should know
what they are getting into, for sure, but at the same time they
should take their own decisions).

Cheers
-- 
t

Thread

sudoers question "Tom Reed" <tom@dkinbox.com> - 2023-05-12 13:40 +0200
  Re: sudoers question Greg Wooledge <greg@wooledge.org> - 2023-05-12 14:00 +0200
    Re: sudoers question "Tom Reed" <tom@dkinbox.com> - 2023-05-12 14:10 +0200
      Re: sudoers question Nicolas George <george@nsup.org> - 2023-05-12 14:10 +0200
        Re: sudoers question "Tom Reed" <tom@dkinbox.com> - 2023-05-12 14:20 +0200
          Re: sudoers question Nicolas George <george@nsup.org> - 2023-05-12 14:30 +0200
          Re: sudoers question Greg Wooledge <greg@wooledge.org> - 2023-05-12 14:30 +0200
          Re: sudoers question Michel Verdier <mv524@free.fr> - 2023-05-12 14:40 +0200
          Re: sudoers question Curt <curty@free.fr> - 2023-05-12 18:20 +0200
      Re: sudoers question Hanno 'Rince' Wagner <wagner@rince.de> - 2023-05-12 14:20 +0200
      Re: sudoers question Greg Wooledge <greg@wooledge.org> - 2023-05-12 14:20 +0200
        Re: sudoers question Nicolas George <george@nsup.org> - 2023-05-12 14:30 +0200
          Re: sudoers question Nicolas George <george@nsup.org> - 2023-05-12 14:30 +0200
          Re: sudoers question Stefan Monnier <monnier@iro.umontreal.ca> - 2023-05-12 14:30 +0200
            Re: sudoers question Byung-Hee HWANG (황병희)   <soyeomul@doraji.xyz> - 2023-05-12 16:10 +0200
              Re: sudoers question Max Nikulin <manikulin@gmail.com> - 2023-05-12 16:40 +0200
            Re: sudoers question Michel Verdier <mv524@free.fr> - 2023-05-12 17:50 +0200
              Re: sudoers question <tomas@tuxteam.de> - 2023-05-12 17:50 +0200
                Re: sudoers question Michel Verdier <mv524@free.fr> - 2023-05-13 10:40 +0200
                Re: sudoers question <tomas@tuxteam.de> - 2023-05-13 12:30 +0200
                Re: sudoers question debian-user@howorth.org.uk - 2023-05-13 14:20 +0200
                Re: sudoers question Dan Ritter <dsr@randomstring.org> - 2023-05-13 16:20 +0200
            Re: sudoers question Lee <ler762@gmail.com> - 2023-05-13 00:10 +0200
              Re: sudoers question Lee <ler762@gmail.com> - 2023-05-13 08:00 +0200
                Re: sudoers question Kushal Kumaran <kushal@locationd.net> - 2023-05-13 18:10 +0200
                Re: sudoers question <tomas@tuxteam.de> - 2023-05-13 18:50 +0200
              Re: sudoers question Nicolas George <george@nsup.org> - 2023-05-13 12:40 +0200
  Re: sudoers question "Andrew M.A. Cater" <amacater@einval.com> - 2023-05-12 14:30 +0200

csiph-web