w3dn35d4y
Originally Posted by legasti
WTF is Sudo?
VIP Member
iTrader: (7)
Joined: Jun 2003
Posts: 25,095
From: Funtown
Car Info: A limousine with a chauffer
Originally Posted by legasti
WTF is Sudo?
frustrations about sudo:
* configuring it a gillion different ways for every effing user we support. You have to think like a jerk who will try to take advantage of the system when configuring. There's all kinds of neat tricks to gain super user access on a system through sudo and as an admin you have to try and account for everything you can.
* the fact that sudo runs under your environment variables and shell, not under root's (though I understand the security measure behind it)
* You can't redirect output in to a file owned by root via sudo. That is the most annoying thing, but I found a cool command called 'tee' that allows it (cat file | sudo tee filename)
benefits:
* helps make the system more secure
* I can give you access to do specific things on a system and then track every command you run so that if you goof up the system I can own you.
VIP Member
iTrader: (7)
Joined: Jun 2003
Posts: 25,095
From: Funtown
Car Info: A limousine with a chauffer
Originally Posted by nKoan
oh but usually I've got the superuser password so it goes something like this for me 
% ./somecommand
denied
% sudo somecommand
error, because some permissions are set correctly and some aren't
%su
% ./somecommand
success!
I like the concept behind it, but more often then not it isn't setup properly and is more frustrating then its worth.
% ./somecommand
denied
% sudo somecommand
error, because some permissions are set correctly and some aren't
%su
% ./somecommand
success!
I like the concept behind it, but more often then not it isn't setup properly and is more frustrating then its worth.
Thread Starter
VIP Member
iTrader: (17)
Joined: May 2005
Posts: 22,776
From: Sunnyvale, CA
Car Info: '13 BRZ Limited / '02 WRX
Originally Posted by legasti
WTF is Sudo?
Originally Posted by Teh W3b
Sudo (superuser do) allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root or another ...
Originally Posted by sonicsuby
I used to love catching users who somehow got their hands on the root password. SO much joy. Now we've got things pretty locked down and it doesn't happen anymore
MILF Hunter
Joined: Jan 2003
Posts: 1,242
From: Sacramento
Car Info: 2005 Legacy GT
Originally Posted by sonicsuby
It's a software tool that is given "root" or "super user" authority on a system. You configure sudo to allow users or groups of users access to specific commands on the system. sudo also logs the commands and user info when someone runs a command through it. Then, as a user wanting to execute a command, you run "sudo command" and the command gets executed as the "root" user.
frustrations about sudo:
* configuring it a gillion different ways for every effing user we support. You have to think like a jerk who will try to take advantage of the system when configuring. There's all kinds of neat tricks to gain super user access on a system through sudo and as an admin you have to try and account for everything you can.
* the fact that sudo runs under your environment variables and shell, not under root's (though I understand the security measure behind it)
* You can't redirect output in to a file owned by root via sudo. That is the most annoying thing, but I found a cool command called 'tee' that allows it (cat file | sudo tee filename)
benefits:
* helps make the system more secure
* I can give you access to do specific things on a system and then track every command you run so that if you goof up the system I can own you.
frustrations about sudo:
* configuring it a gillion different ways for every effing user we support. You have to think like a jerk who will try to take advantage of the system when configuring. There's all kinds of neat tricks to gain super user access on a system through sudo and as an admin you have to try and account for everything you can.
* the fact that sudo runs under your environment variables and shell, not under root's (though I understand the security measure behind it)
* You can't redirect output in to a file owned by root via sudo. That is the most annoying thing, but I found a cool command called 'tee' that allows it (cat file | sudo tee filename)
benefits:
* helps make the system more secure
* I can give you access to do specific things on a system and then track every command you run so that if you goof up the system I can own you.
uhhh does not compute... I'm gonna go watch tv now
Thread
Thread Starter
Forum
Replies
Last Post