From: vallor@vallor.earth
At Tue, 20 Jan 2026 19:47:14 -0500, c186282 wrote:
> On 1/20/26 16:43, rbowman wrote:
> > On Tue, 20 Jan 2026 21:00:59 -0000 (UTC), Lawrence D’Oliveiro wrote:
> >
> >> Yeah, but sudo *is* for running things as root! You think running them
> >> via sudo is any better than however else you were thinking of doing
> >> those things as root?
> >
> > Sudo limits the damage. Become root with 'sudo su -' and you'd better not
> > have lapses of attention. I think it was OpenSUSE where if you were root
> > the wallpaper turned bright red with round, black bombs with smoking
> > fuses.
>
> 'sudo', as often implemented, is NOT safe. PI-os
> doesn't even ask for yer user PW.
>
> You CAN tweak sudoers ... tighten things up a bit,
> but that's more work and, if like me, you never
> use 'visudo', just 'nano', you'd better get the
> syntax right.
>
> The alt is to have NO 'sudo'. If you are concerned
> about security then this may be the best and easiest
> path. Open a terminal, 'su', then you need the ROOT
> password.
I have a file in /etc/sudoers.d that includes this directive:
Defaults targetpw
So I need the root password to sudo to root.
--
-v System76 Thelio Mega v1.1 x86_64 Mem: 258G
OS: Linux 6.18.5 D: Mint 22.3 DE: Xfce 4.18 (X11)
NVIDIA GeForce RTX 3090Ti (24G) (580.105.08)
"Windows: XT emulator for an AT."
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)
|