Re: Sudo and other root-based security issues

1999-10-19 Thread John Hasler
David J. Kanter writes: > But since some commands require root access, and it's a pain to su root > all the time, how secure is it to run sudo on something like wvdial or > slrnpull? wvdial should not require root if your user is in group dip (wvdial may also require 'dialout': pon does not). I'v

RE: Sudo and other root-based security issues

1999-10-19 Thread Bryan Scaringe
Actually, how a cracker will typically try to get in is by exploiting security holes in deamons that listen to network ports. These programs USUALLY run as root. Logging in as root presents little-to-no additional risk. If your system security is weak, logging-in as root wont cause much addition