Benefits of using sudo
Posted by Team Secugenius -
Unknown
at
4:23 PM
Some benefits of leaving Root logins disabled by default include the following:
- The Ubuntu installer has fewer questions to ask.
- Users
don't have to remember an extra password (i.e. the root password),
which they are likely to forget (or write down so anyone can crack into
their account easily).
It avoids the "I can do anything"
interactive login by default (e.g. the tendency by users to login as an
"Administrator" user in Microsoft Windows systems), you will be
prompted for a password before major changes can happen, which should
make you think about the consequences of what you are doing.
sudo adds a log entry of the command(s) run (in /var/log/auth.log). If you mess up, you can always go back and see what commands were run. It is also nice for auditing.
Every cracker trying to brute-force their way into your box will know it has an account named Root
and will try that first. What they don't know is what the usernames of
your other users are. Since the Root account password is locked, this
attack becomes essentially meaningless, since there is no password to
crack or guess in the first place.
Allows
easy transfer for admin rights, in a short term or long term period, by
adding and removing users from groups, while not compromising the Root account.
- sudo can be setup with a much more fine-grained security policy.
- The
Root account password does not need to be shared with everybody who
needs to perform some type of administrative task(s) on the system (see
the previous bullet).
- The
authentication automatically expires after a short time (which can be
set to as little as desired or 0); so if you walk away from the terminal
after running commands as Root using sudo, you will not be leaving a
Root terminal open indefinitely.
0 comments: