undefined | Better HN

0 pointsilyagr2y ago0 comments

Native question: if you can `sudo`, can't you just `sudo bash`? What can you do with `su` that you couldn't do with `sudo bash`?

Or is the wheel group not really about being able to sudo?

0 comments

cdrt2y ago

You’re thinking about it backwards

`su` predates `sudo` by a decade doesn’t offer the fine-grained control `sudo` has. With `su` if you have the root password, you can do anything you want as root. With `sudo` admins can configure what commands users are allowed to run as root and could specifically block `sudo bash` from running.

tedunangst2y ago

Wheel and su predate sudo by many years. sudo has a config file called sudoers; su has a config file called the wheel line in /etc/group.

justsomehnguy2y ago

It's 'substitute user', not just 'super user'. With su you can impersonate any user.

Wheel users can do anything because (default) sudoers contains

  %wheel  ALL=(ALL)   ALL

https://unix.stackexchange.com/questions/152442/what-is-the-...

j / k navigate · click thread line to collapse