What SU Commands Have you Given to Your Login?

halfpower · 08-11-2006, 04:46 PM

I have my login and my super user power but I have given next to nothing in the way of extra commands to my login. Have you given your login any extra powers? I still "su" to shutdown or reboot my machine.

Samoth · 08-11-2006, 05:20 PM

I always su to do anything administrative-like. It is a potential security risk to give extra privileges to your user account.

Tinkster · 08-11-2006, 05:39 PM

Quote:

Originally Posted by halfpower

I have my login and my super user power but I have given next to nothing in the way of extra commands to my login. Have you given your login any extra powers? I still "su" to shutdown or reboot my machine.

I've added myself to sudoers with the permission to
halt and reboot the box, and bring interfaces up & down.

For everything else I'll bite the bullet and su - (or su - root -c "command"
if know for sure what I'm up to), and punch in my root password.

Cheers,
Tink

Jongi · 08-11-2006, 05:55 PM

How do you restrict what sudoers can do?

Tinkster · 08-11-2006, 08:00 PM

Eh?

That's the whole point of sudo; oh, you're using Ubuntu.

Change the line (using visudo):
<user> ALL=ALL
to say
<user> ALL=<comma-separated list of commands you want to allow>

Cheers,
Tink

Jongi · 08-12-2006, 08:24 AM

Tinkster: You posted that there are only a few things you can do if you put yourself as a sudoer. Otherwise you have to actually login as root.

I asked how do you limit what a user in the sudoer group can do? But I see you answer the question nonetheless. This is on FC5 btw.