deny su - root

[Marti, Rob]

________________________________________
From: redhat-list-bounces at redhat.com [redhat-list-bounces at redhat.com] On Behalf Of mark [m.roth2006 at rcn.com]
Sent: Saturday, June 06, 2009 10:33
To: General Red Hat Linux discussion list
Subject: Re: deny su - root

hike wrote:
<snip>
> "Your manager should have it, but NO ONE ELSE, EVER."
>
> Are you a frakking idiot?
>
> managers should never have root password.
> have you ever seen what managers DO for a living?
>
The ones I've worked with either knew what they were doing, or didn't touch it.
However, if you get hit by a car while out at lunch, or leave for greener
pastures, they have to know it for the next admin.

        mark

________________________________________

You can reset passwords... sure, it takes downtime but the fewer people that know passwords, the better.

Rob