http://qs321.pair.com?node_id=306439


in reply to Re: qx//, ssh -t (pseudo-tty) and sudo
in thread qx//, ssh -t (pseudo-tty) and sudo

Way OT here, but there is a huge difference between using ssh as root and using ssh as a normal user who has sudo privileges.

While the differences are too numerous to mention, it is important to remember root is all-powerful. Period. No questions asked.

sudo is highly configurable as to which user/group can do what. You can fine-tune which user can do X, which group can do Y, etc.

I'll take 1,000 users with sudo privileges over 1,000 users logging in as root any day. At a minimum, I can look at the logs and see who did what, as opposed to thousands of entries showing root logging in, and then one entry where root rm -rf /.

If things get any worse, I'll have to ask you to stop helping me.