nanog mailing list archives

Re: Security Practices question


From: just me <matt () snark net>
Date: Wed, 2 Oct 2002 17:48:16 -0700 (PDT)


On Wed, 2 Oct 2002, Scott Francis wrote:

  Can you back up that statement in /any/ way? What exactly are your reasons
  why sudo is a worse solution (or even a bad idea)?

In an environment where every sysadmin is interchangable, and any one
of them can be woken up at 3am to fix the random problem of the day,
you tell me how to manage 'sudoers' on 4000 machines.

In an situation where the team needs root; all per-admin UID 0
accounts add is accountability and personalized shells/environments.

Sorry to ruffle your dogma.


--mghali () snark net------------------------------------------<darwin><
   Flowers on the razor wire/I know you're here/We are few/And far
   between/I was thinking about her skin/Love is a many splintered
   thing/Don't be afraid now/Just walk on in. #include <disclaim.h>


Current thread: