On Wed, 12 Jan 2005, Goulet, Dick wrote:
> Whatever, I'll keep root only for absolutely restricted use & install
> under a separate user account. Works just fine & it makes the auditors
> & sysadmin feel better.
Unfortunately, I _know_ how auditors think, but I would hope that a
sensible company would have admins that know better. After a few years
in that role... ah, probably better not to say.
If you stop and look at the binaries you use as that separate account to
do, well, just about anything - specifically who owns them, and why, you
might find a few interesting thoughts about how actual unix security
works bubbling around. But this is just technical advice, not career
advice.
-j, glad to be where he is now.
--
Jamie Lawrence jal@jal.org
I have come to believe that the whole world is an enigma, a harmless
enigma that is made terrible by our own mad attempt to interpret it as
though it had an underlying truth.
- Umberto Eco