Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?

From	Richard Hector <richard@walnut.gen.nz>
Newsgroups	linux.debian.user
Subject	Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?
Date	2019-06-20 07:40 +0200
Message-ID	<yaXXH-2Z4-5@gated-at.bofh.it> (permalink)
References	<yaH6y-17a-5@gated-at.bofh.it> <yaXEl-2SC-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On 20/06/19 4:56 PM, Bagas Sanjaya wrote:
>> That is almost as bad as having no security restrictions at all. The
>> correct thing to do would be to set permissions on the programs to
>> allow them to be run by group remaja.
> What I thought that the correct way is to configure sudoers so that
> remaja group can access programs that they absolutely required via sudo
> (e.g. mount for mounting USB sticks).
> 
>> I don't say this often. I would immediately fire the person
>> responsible for instituting this policy on a "production" system. (It
>> would be a good policy if the system is intended as an educational
>> environment to allow the teens to ruin things, and learn from
>> experience.)
> In fact, many television stations have most programs written for teens
> (age 13 and older), so sysadmins there configure sudoers which allows
> teens to behave like sysadmins themselves (by giving them full
> administrator privileges) on their production systems. Also, parental
> monitoring and guidance can reduce likehood of teens breaking such
> systems. Maybe because teens are largest marketshare for TVs.
> 

I think we (or at least I) must be missing some context here. For
starters, this must be some specific group of teenagers. And I'm sure
they're not given permission to take over running the whole TV station.

Is this some specific educational environment? Or is it a TV station
specifically intended to be run by and for teenagers? Something else?

Richard

Thread

Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-19 06:30 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? john doe <johndoe65534@mail.com> - 2019-06-19 08:00 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-19 08:10 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-19 13:40 +0200
    Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 07:20 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-20 07:40 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 09:20 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-20 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-20 14:10 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-20 13:00 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 14:50 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-20 18:40 +0200
            Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl Fink <carlf@panix.com> - 2019-06-21 21:50 +0200
              Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 01:00 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 04:30 +0200
                Re: Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 10:40 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 17:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Brad Rogers <brad@fineby.me.uk> - 2019-06-22 18:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 18:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 18:50 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-22 14:20 +0200
              Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 02:40 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 10:10 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 11:50 +0200
                Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 12:30 +0200
                Re: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-22 12:40 +0200
                Off-topic: Action [Was: Re: Off topic: remaja (teens) Erik Christiansen <dvalin@internode.on.net> - 2019-06-22 13:40 +0200
                Re: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-22 23:40 +0200
                Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 01:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 01:50 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 03:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 09:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 10:00 +0200
                Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 10:50 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 16:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) rhkramer@gmail.com - 2019-06-23 18:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic:  remaja (teens) Curt <curty@free.fr> - 2019-06-23 18:30 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 19:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-23 11:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 12:30 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Georgios <gpdsbe@mailbox.org> - 2019-06-23 20:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 22:50 +0200
                Re: Off topic: Carbon. John Hasler <jhasler@newsguy.com> - 2019-06-23 23:10 +0200
                Teenagers (was: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?) rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:30 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Jimmy Johnson <field.engineer@gmail.com> - 2019-06-23 01:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-23 02:10 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-23 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-24 02:40 +0200
            Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-24 02:50 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-25 06:00 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? mick crane <mick.crane@gmail.com> - 2019-06-25 09:10 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Aidan Gauland <aidalgol@fastmail.net> - 2019-06-25 10:00 +0200
      Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-25 10:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-25 14:50 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? andreimpopescu@gmail.com - 2019-07-02 14:50 +0200

csiph-web