[sudo-users] sudo remove -s and -i option

Michael Ströder michael at stroeder.com
Wed Aug 23 02:27:33 MDT 2017


David Ledger wrote:
> As a contact Unix SysAdmin since 1990 I’ve seen many ‘security’ scenarios, and the
> root (:-)) of your problem isn’t sudo, but most likely the security policy. Usually
> when it’s a battle between security and getting things done it means that the security
> policy is badly thought out. What you need are people who know what they are doing who
> are totally trustworthy and very careful how they do things. Externally produced
> security policies are the worst. Your company pays them money, they give you a policy;
> but it’s then not their problem that things can’t get done. Where it appears to work
> there’s usually a hidden back door somewhere.

+1 to all of the above.

Ciao, Michael.



More information about the sudo-users mailing list