Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:We don't use sudo? (Score 1) 592

Wow, did I touch a nerve there? I didn't run X on servers, and the only time the root password is typed is if you are at the console. Just because we didn't use sudo doesn't mean we didn't have our own system for access control and auditing.

And I have to agree with visualight, if you are spending 99% of your time as a regular user, then you are not a Unix admin, but more likely an app support/dev person who is in /etc/sudoers.

Either way, I thought the article was funny and was just having some fun with it.

Comment Re:We don't use sudo? (Score 1) 592

I think what I didn't make clear is the fact that we had separate groups that ran the non-root services. With hundreds of systems and a small group of us that had root access(restricted by IP and ssh key-based auth, heavily monitored and any exception was emailed from central syslog, among other things) if we were logging into a server, it was to do something that needed root access. We weren't logging in to troubleshoot apache as root. Well, sometimes, but we had everything scripted so we wouldn't start things up with the wrong UID.

We didn't even have sudo installed on the really old systems and any su would trigger alerts.

I guess my original point was, as root I was aware of the loaded gun I was carrying, but that was my job. It seems that many of the admins in this thread may be of the small shop variety that are wearing more than just the # hat. That is fine too, and if you do have to wear different hats, then sudo is probably a great thing.

And really, lighten up kids, you too will be old and bearded someday and will get a kick out of arguing the merits of old school vs. new school. Hell, when I started security was an after thought and if you wanted to harden a system, you were considered a security nazi.

Comment Re:We don't use sudo? (Score 1) 592

I didn't say that. There is more than one way to skin a cat. Everything that was ever done as root on the systems in question were logged. And I am not sure what you mean by separation of duties, but app support, dbas and root tasks are all performed by their own accounts and staff. If I needed to help a dba, I would sit with them and use their login.

Comment Re:Why stop at shipping? (Score 1) 431

Every time I fly, I envision a 'freight class' where a passenger is neatly tucked into a rigid container(a coffin comes to mind) that has a self-contained oxygen system and is monitored for failure. These containers are then stacked and secured in the plane and delivered to the final destination. You can cram more people into a plane, thereby reducing costs and increasing efficiency (in theory) of the entire system. For the flyer, I imagine a lounge where you are drugged and slipped into the container, and then gently come to in a lounge at your destination. I am sure this sounds too impersonal for many, but I would sign up for it in a heartbeat...no foul odors, no pushing and shoving, no crying babies, etc. Add this system and you could extend the travel efficiency beyond just the airports.

Slashdot Top Deals

Happiness is twin floppies.

Working...