-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gordon Messmer wrote:

>On Thu, 2002-02-28 at 14:06, ashley thomas wrote:
>
>>Oh and please tell me you are not running the local machine as root
><---- 
>>Very bad thing to do. Use sudo instead much better idea. 
>
>i have heard this  a lot of times ...how is it different ?  could you
>pls explain it to me ?
>
>Logging in and actually running your session as root is a bad idea
>because a simple slip-up can be disastrous. 

Late to this thread, so my apologies if this was already pointed out, 
but there's another, more general, reason to not run as root: by doing 
so, you're blowing away the division of privileges that is the reason 
we don't have a virus/trojan problem in the Unix world.  

Consider, for example, the consequences of malicious Javascript when
running as dtalk vs running as root.  The reason Windows boxes are
wide open is because -- despite the fact that NT-class systems are
more than capable of separating privilege at the OS level -- nearly
everyone runs as an administrator, and a lot of Win32 software simply
won't work any other way.

It's a paradigm problem fostered by many years of Win9x thinking.
Don't bring it with you to Linux.

- -d

- -- 
David Talkington

PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp
- --
http://setiathome.ssl.berkeley.edu/pale_blue_dot.html

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQA/AwUBPH8l3r9BpdPKTBGtEQJjZgCbBfzqygVexPg+5ugY01NcDDxnIFAAn3f+
MaooRSmVwk7eO5plToxGJX7f
=G1F9
-----END PGP SIGNATURE-----




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to