Comment Re:Users != Root. (Score 1) 464
As a developer, I agree; I don't need, want or care to have root on a live production machine that I am not 100% completely responsible.
However, on my personal desktop system, if IT doesn't give me the tools I need to do my job, I'm going to get it done, and that usually means getting root access (I have physical access - there's not much you can do to stop me). At one job it took the IT department 6 MONTHS to respond to my request to upgrade the video drivers for my graphics card so that I could use something better than 640x480 60Hz (this was 2 yrs ago). Needless to say, after 2 days, I fixed the problem myself with no adverse effects, and if the IT department had not taken so long to get to me, I would not have rooted my box.
Lesson Learned: Most developers don't care if they have root or not, but if the IT department can't or won't support them, they WILL subvert your attempts at security. To ensure that your systems stay secure, make sure you respond to the developers and users in a timely manner.
However, on my personal desktop system, if IT doesn't give me the tools I need to do my job, I'm going to get it done, and that usually means getting root access (I have physical access - there's not much you can do to stop me). At one job it took the IT department 6 MONTHS to respond to my request to upgrade the video drivers for my graphics card so that I could use something better than 640x480 60Hz (this was 2 yrs ago). Needless to say, after 2 days, I fixed the problem myself with no adverse effects, and if the IT department had not taken so long to get to me, I would not have rooted my box.
Lesson Learned: Most developers don't care if they have root or not, but if the IT department can't or won't support them, they WILL subvert your attempts at security. To ensure that your systems stay secure, make sure you respond to the developers and users in a timely manner.
