Using sudo instead of root passwd for system-config tools

Joel rees at ddcom.co.jp
Fri Mar 11 02:19:34 UTC 2005


> How do you force the use of sudo instead of the root password for launching 
> the system-config-??? Tools via the application menu?
> 
> I believe you need to change something in the /etc/pam.d files but not sure 
> what

Simpler than that. 

Just take away root's login. Then there's no way in but sudo. 

Just make sure sudo is set up and working correctly first.

And remember that sudo is more of a help than a wall. It makes it a
little easier to figure out who did what when. 

If someone does "sudo sh", then they either have to rip that out of the
log with some kind of program that erases it's own tracks after they
exit the root shell, or you know who it was wandering around
unrestricted and when. (Using sudoers to restrict shells is good, just
remember to make sure you restrict all the shells, even (ahem) the ones
someone adds later. ;-/)

--
Joel Rees   <rees at ddcom.co.jp>
digitcom, inc.   株式会社デジコム
Kobe, Japan   +81-78-672-8800
** <http://www.ddcom.co.jp> **




More information about the fedora-list mailing list