Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Oct 2000 13:39:44 -0700 (PDT)
From:      "Jason C. Wells" <jcwells@nwlink.com>
To:        Kris Kirby <kris@catonic.net>
Cc:        freebsd-chat@FreeBSD.ORG
Subject:   Re: Traditional UN*X conventions (Or: Why not to login as root?)
Message-ID:  <Pine.SOL.3.96.1001016133315.4098A-100000@utah>
In-Reply-To: <Pine.BSF.4.21.0010150739480.59649-100000@spaz.huntsvilleal.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 15 Oct 2000, Kris Kirby wrote:

> Lately I find myself pondering why or why not one is supposed to leave the
> root account alone altogether, instead su(do)ing as necessary to
> perform various tasks. Is there a series of texts out there that states
> this and other traditional measures taken (perhaps with a historical or
> logically documented process in regards to tracking break-ins)?

Let's consider the following typo:

# cd /
# rm -rf /tmp/ *

Which the user intended to be:

# cd /
# rm -rf /tmp/*

If you are in fact root, then you are in fact very, very screwed if you
issue the typo.  In this case, not being root will save you from removing
every last file on every mounted disc. 

Not using root is a commonly held wisdom.  This tidbit is in lots of
different references.  A real good book for many tidbits of wisdom is
"Essential System Administration." 

Thank you,
Jason C. Wells



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SOL.3.96.1001016133315.4098A-100000>