Re: sudo password vs. login

2006-05-29 Thread John Hasler
Roberto C. Sanchez wrote: > On the flip side, though, you should change the root passowrd anyway when > removing someone from sudo access, since you have no idea if they even > have the root password. They had access to the shadow file That depends on what privileges they had. -- John Hasler -

Re: sudo password vs. login

2006-05-29 Thread Roberto C. Sanchez
Felipe Sateler wrote: > Roberto C. Sanchez wrote: > > >>I like the approach which SuSE takes. It requires the *root* password >>to use sudo, not the user's password. > > > But then when you want to revoke the privilege of any user, you'd have to > change the root password, instead of only remo

Re: sudo password vs. login

2006-05-29 Thread Felipe Sateler
Roberto C. Sanchez wrote: > I like the approach which SuSE takes. It requires the *root* password > to use sudo, not the user's password. But then when you want to revoke the privilege of any user, you'd have to change the root password, instead of only removing a line from the sudoers file. --

Re: sudo password vs. login

2006-05-29 Thread Roberto C. Sanchez
Joris Huizer wrote: > Roberto C. Sanchez wrote: > >> Joseph Smidt wrote: >> >>> Is there any way to make the sudo password different from the login >>> password? Wouldn't that make it more secure? That would make two >>> passwords you have to get through to have root access vs. one. >> >> >> >>

Re: sudo password vs. login

2006-05-29 Thread Joris Huizer
Roberto C. Sanchez wrote: Joseph Smidt wrote: Is there any way to make the sudo password different from the login password? Wouldn't that make it more secure? That would make two passwords you have to get through to have root access vs. one. I like the approach which SuSE takes. It req

Re: sudo password vs. login

2006-05-28 Thread Roberto C. Sanchez
Joseph Smidt wrote: > Is there any way to make the sudo password different from the login > password? Wouldn't that make it more secure? That would make two > passwords you have to get through to have root access vs. one. > I like the approach which SuSE takes. It requires the *root* passwor

Re: sudo password vs. login

2006-05-28 Thread Digby Tarvin
On Sun, May 28, 2006 at 08:22:06AM -0600, Joseph Smidt wrote: > Is there any way to make the sudo password different from the login > password? Wouldn't that make it more secure? That would make two passwords > you have to get through to have root access vs. one. Yes, but it doesn't really make

Re: sudo password vs. login

2006-05-28 Thread John Hasler
Joseph Smidt writes: > Is there any way to make the sudo password different from the login > password? Wouldn't that make it more secure? That would make it less secure. Requiring your password confirms that you are you, allowing sudo to log the fact that you used sudo and to restrict you to tho

Re: sudo password vs. login

2006-05-28 Thread Joris Huizer
Joseph Smidt wrote: Is there any way to make the sudo password different from the login password? Wouldn't that make it more secure? That would make two passwords you have to get through to have root access vs. one. -- - Jo

sudo password vs. login

2006-05-28 Thread Joseph Smidt
Is there any way to make the sudo password different from the login password?  Wouldn't that make it more secure?  That would make two passwords you have to get through to have root access vs. one.  -- -   Joseph Smidt [EMAIL PROT