[Sysadmin] got root?

Dean Mah dmah at shaw.ca
Sat Jun 19 10:50:31 CDT 2004


On Fri, Jun 18, 2004 at 09:12:48PM -0400, David Kaufman wrote:

> now how should we handle root access?  i changed the root password already
> since they emailed it to use insecurely :-)  but rather than re-mailing the
> new root password around, i guess i should create user accounts, and
> configure sudo to let each administrator su to root, no?

+1

IMHO, in the long term, I don't think that everyone needs full root
access to the box.  We can set up levels of administration so people
are able to work on b.e.o, d.e.o, l.e.o, etc. as necessary.


> i usually generate temporary passwords for new users using this:
> http://gigawatt.com/pickpass.cgi and email it to them in 2 pieces.
> whadya think, too paranoid?  should i just post the root pw to
> sysadmin list? :-)

I'll take the user account 'dmah'.  Obviously don't e-mail the
password to the list since the archives are open.  You can use my
dmah at members.evolt.org public key if you would like.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
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=pMaP
-----END PGP PUBLIC KEY BLOCK-----


More information about the Sysadmin mailing list