Comment Re:Feature, not a bug. (Score 1) 236
Give them sudo and they can grab root whenever they want:/i>
First, why would support change the root password? They can sudo su and get root if you let them.
Second, one nice thing about giving them sudo instead of root is that you can disable/delete the user or change the password. This is preferable to changing the root password after they access it, especially if you have the same root password on dozens of machines.