-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 03 January 2003 12:11, Sean Dockery wrote:
> It has been typical of other UNIXes in the past that su was owned by group
> "wheel" and you would put users that you wanted to be able to su into group
> "wheel" as well.  The default configuration in my Debian is for su to be
> world readable/exectuable.  Distro laziness favours the crackers, I'm
> afraid.  :-)

i don't think it's laziness, it's the realization that for the vast majority 
of installs this is more of a pain than anything else. on most Linux systems, 
if you have a shell account you also want to be able to switch users. on 
those that this isn't the case, it's a simple matter to harden it.

> I've never configured or used sudo myself, but from what I remember, sudo
> is intended to permit certain users to execute a certain set of commands as
> the root user. 

or any other user. it's most often used for running commands w/root 
priveleges, but isn't limited to that. you can also control things like which 
host the command can be run on...

- -- 
Aaron J. Seigo
GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA  EE75 D6B7 2EB1 A7F1 DB43

"Everything should be made as simple as possible, but not simpler"
    - Albert Einstein
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+FeoX1rcusafx20MRAoJ7AKCqcTGamBV8A0Qupw2knxtFFczP1QCeMf+0
2bPrrCvfujunBP6mEYudbos=
=TO8Q
-----END PGP SIGNATURE-----

Reply via email to