Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'SU Better than SUDO!?!?!' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
SU Better than SUDO!?!?!
Authored by: mudmonkey on Mar 08, '02 11:21:59AM

Before chastising people for trying, learn about your own system some.

Sudo is ALWAYS preferable to su. In fact, no one outside of the wheel group is typically allowed su. sudo was designed to fix many of the problems with su regarding security and logging. Remember, everything you do via sudo is logged. Want to know where you went wrong? Check the log. su provides little or no security checking unlike sudo.



[ Reply to This | # ]
No! (usually) (re: SU Better than SUDO?)
Authored by: sharumpe on Mar 08, '02 01:38:14PM

I'd go a step farther and say that, unless something is wrong or just plain won't work under sudo (rare), you shouldn't ever log in as root unless you are so filled with hubris that you think the BOFH stuff is all funny, and never offensive (standard for a sysadmin).

Maybe over the top, but the main point is that it is dangerous to play around as root unless you are a) sure about what you're doing; and/or b) willing to live with the consequences if not a).

:)
Mr. Sharumpe



[ Reply to This | # ]
No! (usually) (re: SU Better than SUDO?)
Authored by: mervTormel on Mar 09, '02 01:46:01PM

--
unless you are so filled with hubris that you think the BOFH stuff is all funny, and never offensive (standard for a sysadmin).
--

i take umbrage at that poke, sharumpe. that is not standard sysadmin behavior. perhaps you've had some bad experiences, but please don't perpetuate the mythology about admins. being a sysadmin is like herding cats. but most admins are good folk, and truly helpful. perhaps one's approach to an admin needs to be carefully considered. help them help you.

as to the su vs. sudo debate, i think the key here is what fighter pilots call "situational awareness." and that by dropping your guard, you can get your ass shot off.

as for any code anywhere you acquire it; 'tis best to eyeball it as best you can and if you don't understand parts, try and run small excerpts of code piece-meal so you can see their results.

-mt

--
It has been said that systems administration is hours of boredom interrupted by moments of sheer panic. Through the highs and lows of this existence, there is one constant: answering user requests.



[ Reply to This | # ]