On Wednesday 17 April 2002 13:16 pm, Philip S Tellis wrote:
> Actually, having an alternate account with uid/gid 0 could be useful,
> and improve security - if done correctly.
>
> Basically, any administrative tasks and only administrative tasks that
> actually require root access should be done as this other user.

With apologies to Bill S., that which we call a root user by any other name 
would be just as powerful as full system administrator.

The way to go is via sudo. The second user with 0/0 is risky. Don't do it.

Just think if user admin, with 0/0 logs in, edits /etc/passwd and puts the 
admin line above the root line there. Then getpwd*() functions will return
the admin line instead of the actual root line, and your logs won't show root
logins/attempts at all.

Binand

_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to