由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档,一周内的贴子最多显示50字,超过一周显示500字 访问原贴
Unix版 - 关于root帐号的管理问题
相关主题
怎么控制su的permission?help: solaris interface configuration
how to configure .login ???如何在KDE下实现权限的限制?
how to kick a remote login user out ?How to make unix-login online?
Why I can not change my password?happy new year, one security related question (UNIX)
Re: 这样的问题还能继续吗?Re: 不是ROOT可以在UNIX下装CXTERM吗?Help! A question about "sudo"
reset solaris root password用了个野蛮办法解决了Re: Help! A question about "sudo"
帮我看看我的GCC怎么了!谢谢Solaris 8 Companion CD 安装问题
a UNIX permission question他可以做什么?? (在unix)
相关话题的讨论汇总
话题: root话题: sudo话题: company话题: do话题: us
进入Unix版参与讨论
1 (共1页)
s**********r
发帖数: 565
1
公司不允许我们sudo to root from our own user id to do anything. what they do
is to grant root permission for specific command which we need to run as
root. this causes a lot of unconvinence for us. my previous company do allow
us to sudo to root, then do anything we want. I wonder if any expert here
can help me understand how come my previous company can allow us to run as
root for all, but this company can not. is there a way to prevent user to
login as root directely if they know root's password?
t*****s
发帖数: 3478
2
root usually is only for systems admin, your current company does right
things.
you do not have to compare to another company. in some companies, you may
have root password too, even not use sudo. but for security reason, if you
are not a systems admin, then you should not have root password or sudo to
all as root.
yes, we can configure root not directly login from remotely, but only
allowed from console. if you log in through ssh, then ssh needs to be
configured as well, so root can not log in

【在 s**********r 的大作中提到】
: 公司不允许我们sudo to root from our own user id to do anything. what they do
: is to grant root permission for specific command which we need to run as
: root. this causes a lot of unconvinence for us. my previous company do allow
: us to sudo to root, then do anything we want. I wonder if any expert here
: can help me understand how come my previous company can allow us to run as
: root for all, but this company can not. is there a way to prevent user to
: login as root directely if they know root's password?

1 (共1页)
进入Unix版参与讨论
相关主题
他可以做什么?? (在unix)Re: 这样的问题还能继续吗?Re: 不是ROOT可以在UNIX下装CXTERM吗?
问:用惯linux的人适不适合转Mac OS??reset solaris root password
dnsmasq自带tftp server的问题 帮我看看我的GCC怎么了!谢谢
多次遇到这种问题:previous declaration of .....a UNIX permission question
怎么控制su的permission?help: solaris interface configuration
how to configure .login ???如何在KDE下实现权限的限制?
how to kick a remote login user out ?How to make unix-login online?
Why I can not change my password?happy new year, one security related question (UNIX)
相关话题的讨论汇总
话题: root话题: sudo话题: company话题: do话题: us