[sudo-users] default root configuraiton in sudoers
Terry Inzauro
terry at remote-shell.org
Wed Jul 29 10:57:18 MDT 2015
That's in line with what I was thinking too. Thank you for the quick
response and work on the project.
kind regards,
Terry
Quoting "Todd C. Miller" <Todd.Miller at courtesan.com>:
> On Wed, 29 Jul 2015 15:36:11 -0000, Terry Inzauro wrote:
>
>> I'm having a difficult time understanding why the following entry
>> exists in default installations in several popular Linux distributions:
>>
>> [root at foohost ~]# grep ^root /etc/sudoers
>> root ALL=(ALL) ALL
>>
>> What are the use cases where this would be justified / desired?
>
> Root can already run commands as any user via su(1) so there is
> really no additional privilege being granted. There are times when
> a root shell is needed and by allowing root to use sudo it is
> possible to have better logging of what is done in the root shell.
>
> - todd
More information about the sudo-users
mailing list