[clue-admin] server config changes - sudo use

Jeff Cann j.cann at isuma.org
Sun Feb 20 03:50:56 MST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It occurred to me that folks who have sudo access should not simply sudo su or 
sudo su - root - this leaves no system log trace of commands you executed as 
root.

So, if you want to run root commands, put /sbin and /usr/sbin/ into your path 
and make sure you prefix such commands with sudo, e.g., 

 $ sudo useradd bob ...

This will leave a nice audit trail so [other] folks can see what changed.

Jeff
- -- 
"Science can purify religion from error and superstition. Religion can purify 
science from idolatry and false absolutes."
- - Pope John Paul II

http://isuma.org/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFCGGuUi4b9OApLCmoRAg59AJ9KNTs5Eo9yYJTVsxjFYRXJTMG41gCfY+WL
tTbXPyCYzPvqQ+VdcKsTRBA=
=R1PP
-----END PGP SIGNATURE-----




More information about the clue-admin mailing list