Hello,

I'm new here and have a question that does not make sense to me and thought maybe you guys could help me out.

Making a new user & allowing them to use Sudo, why is it that making it less accessible through sudo is a security risk??

I would think that if a user cant use sudo is more safe then the other way around??

thanks

I believe that the situation to which you refer is if you want to allow a particular normal user account to perform some privileged function. In this case the choices are to use sudo or to give the normal user access to the root account. When you provide privileges through sudo then you do not give the root account password to the normal user. They use their normal user account password to access sudo. Also, sudo can provide fine grain control on what the normal user is allowed to do. Access to the root account would give the normal user complete access to all functions. So advantages of using sudo are:

1) You do not disclose the root account password or provide access to the root account.

2) You can control what sudo allows the normal user account to do.

More information is available in the man page for sudo.