LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Is it possible have another root? (https://www.linuxquestions.org/questions/linux-newbie-8/is-it-possible-have-another-root-824957/)

professorgenival 08-08-2010 01:44 PM

Is it possible have another root?
 
I know that we normaly use the command sudo su to change to root.. but, If I want to promotes an user to have the same powers of the root is it possible?

XavierP 08-08-2010 01:52 PM

It is, but it is much easier to use sudo to do this. Edit the sudoers file with the command visudo.

Tinkster 08-08-2010 02:28 PM

And in addition to the above: running a system as root is
a bad idea, and just giving any other user the same privileges
doesn't make the idea any better.



Cheers,
Tink

jefro 08-08-2010 03:08 PM

You protect you system by using best practices. One of the best practices is to use a user with the lowest permission needed to perform job. su and sudo do let you access a user that has the root permissions. You can make a lower level user that has different permissions. Simply su to that user to perform the task it has permission for. For example, su drivemaint would be to maintain drives, drivemaint may only have permission to work on drive.

If you made an equal to root there would be no change or improvement to security. Root or an equal is the same thing.

zootboy 08-08-2010 03:13 PM

I agree with the above posters, but if you need someone to have almost-root level access (like a sysadmin), I would suggest you give them full-sudo privileges instead of root access. That way, you can audit their activities and keep control over their abilities much more easily.

pr_deltoid 08-08-2010 04:13 PM

I'm not suggesting you do this, but I like the way FreeBSD sets things up with the toor account. You can avoid changing the shell of your root account, but you can log in as toor (with user ID 0) and you're root, but you can use whatever shell you like and set a password for the account. I was using bash as my user account shell, and so I set my toor password and used bash for my toor account. :)


All times are GMT -5. The time now is 11:13 AM.