undefined | Better HN

We've got root passwords set on, IIRC, all of our systems. They're long, random, and can only be entered through the console on the VGA port or the IPMI console.

lmz2y ago

su is also a suid binary, no? It is probably a lot less complex than sudo.

j / k navigate · click thread line to collapse

0 comments

8 comments · 2 top-level

rpgwaiter2y ago· 6 in thread

root would need a defined password, which opens up other security concerns

akira25012y ago

Even if you allow passwordless su for users in the wheel group?

bdd8f1df777b2y ago

That's extremely dangerous. Any software running as a wheel user can escalate privileges willy nilly.

1 more reply

bogantech2y ago

If you do that you deserve what you get

djbusby2y ago

Do what!?

bobmcnamara2y ago

plzno

CaliforniaKarl2y ago

We've got root passwords set on, IIRC, all of our systems. They're long, random, and can only be entered through the console on the VGA port or the IPMI console.

lmz2y ago

su is also a suid binary, no? It is probably a lot less complex than sudo.

j / k navigate · click thread line to collapse