multiple root accounts

[Joel Rees]

On 2006.3.7, at 06:31 AM, jdow wrote:

> From: "azeem ahmad" <azeem81 at msn.com>
>
>> hi list
>> i want more than 1 root accounts in FC4, for example
>> user: root
>> user: must
>> user:azeem
>> all the 3 accounts should have the same root previligies to do 
>> anything on the system
>> how it could be done
>
> Run XP?
>
> Seriously, this is something that in practice cannot be done. You can
> setup multiple account names for entering the root or number 0 user ID.
> All this does is weaken your security. It does not enhance anything.
> The proper technique is enable "sudo" and have the users prefix "sudo "
> to their commands which must be run as root. And even that is not all
> that safe. "su -l -c <command string>" is somewhat better yet even
> though it is more typing. It requires actual knowledge of the root
> password rather than access to an account that is sudo enabled.
>
> {^_^}

Irony?

I use sudoers to give sudo access to my own admin account. That way I 
don't have to wonder if a keylogger took my root password. (It's just a 
speedbump, I know.) If I need to give others access to something, I'm 
going to make them a script and give them access to that script only 
with sudo. (It's a speedbump, I know, but it's tall enough for most of 
the people I would need to worry about.

Does anyone use sudo to run firefox with reduced privileges?