this post was submitted on 09 May 2024
223 points (95.9% liked)

Linux

48287 readers
627 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] lemmyvore@feddit.nl 1 points 6 months ago (1 children)

If the root account has no credentials then nobody is guessing your password and logging in as an admin.

They just need to log in as you and trick you into entering your password in a seemingly legit prompt.

On a multi-user system it allows for multiple admins without sharing a password.

Multiple distinct ssh keys do the same. As long as everybody ends up doing things as the same user it's all moot anyway.

It also allows providing admin access for "some" things but not others.

Can I provide selective access to just some files? Just some network interfaces? Just some ports? Just some parts of RAM or CPU? Without being able to change those limits?

[–] atzanteol@sh.itjust.works 1 points 6 months ago (1 children)

So just login as root to your system then. You'll be fine.

[–] lemmyvore@feddit.nl 2 points 6 months ago (1 children)

The point I'm trying to make is that having just one "super" account for everything is a very poor idea. A lot of work has gone into filtering access to the root account and very little into getting rid of the root account. Ideally nothing should run as root, it should run as individual accounts with varying levels of access on a need-to-have basis.

[–] atzanteol@sh.itjust.works 3 points 6 months ago

"That's* what you meant when you said this???

I've always wondered why we even bother with SUID commands. Why not just log in as root?