Trouble at the 9th layer.

David Hummel lemmuh-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Sun Nov 29 10:07:47 EST 2009


On Sun, Nov 29, 2009 at 12:01 AM, Rich Braun <richb-RBmg6HWzfGThzJAekONQAQ at public.gmane.org> wrote:
> If I sent that
> out, the devs would instantaneously go over my head and I'd get a CTO or VP
> directive that so-and-so gets root, period, on all dev boxes (and I've even
> gotten that directive for two of the devs on all /production/ boxes).

More attention should probably paid to what exactly said developers
needs root privileges for.  It seems to me that if the sysadmin has
configured sensible users/groups for different files, services, etc.,
then sudo privs can be confined to those non-root users.  Wrapper
scripts can also be written for common tasks...





More information about the Discuss mailing list