On Tuesday 08 July 2003 22:21, Josh Welch wrote: >Gene Heskett said: >> Humm... Josh, an even better question might be, howinhell did it >> get commented out? I'd be wearing my sherlock cap on that one. >> Walking very softly, and listening very carefully. > >Well, I am not the only one with root access to this particular > machine currently. It is an unpleasant situation which I am working > on rectifying, Developer's should *not* be given root access on > production machines. End of story.
Maybe. Sometimes its unavoidable. I once gave one of the amanda developers root on my office machine. That resulted in a much better version of chg-scsi for everyone. But, when he was done, root got itself a brand new password. Would I do it again for that person? In a heartbeat. But I'd have to shut the firewall down even then unless I could write a quick and dirty rule for iptables that would pass him. That machine had a fixed IP address too, this one does not, further compounding the problems for him I'm afraid. >Josh -- Cheers, Gene AMD [EMAIL PROTECTED] 320M [EMAIL PROTECTED] 512M 99.26% setiathome rank, not too shabby for a WV hillbilly Yahoo.com attornies please note, additions to this message by Gene Heskett are: Copyright 2003 by Maurice Eugene Heskett, all rights reserved.
