root | su

Manolis Kiagias sonic2000gr at gmail.com
Fri Oct 24 11:25:34 PDT 2008


Jos Chrispijn wrote:
> Is there a way of stopping root from su'ing to another user?
>
> Jos Chrispijn
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"
>
Root is supposed to be the almighty god on your machine (i.e. you...). 
No point trying to limit the abilities of root (especially if physical 
access is also provided).
And seriously,  root is a role not a person. If you find yourself trying 
to limit root's capabilities, you've probably surrendered the root 
password to the wrong person. If you need to give someone limited root 
access to a machine, just use security/sudo instead (with a carefully 
crafted sudoers file).


More information about the freebsd-questions mailing list