[Discuss] sudo

[Craig Miller]

Bernie,

This is a really BAD idea. As you have already determined, all processes 
spawned by the user will have the user's privilege level. If you start 
out as root, then all processes spawned (such as browsers) will have 
root privileges as well.

One of the reasons why Linux is more secure than Windows is because the 
user isn't Admin from the start (yes, windows can be configured this way 
as well, but few do). Should a malicious app be run, and you are root, 
it will have access to the entire systems.

It could be that your user is not configured for the correct groups. To 
see the groups type 'id' in a terminal. If you are trying to connect to 
a network, and you aren't in the network group, you are going to have to 
use sudo. I would suggest reviewing the groups your user is in, and 
adding the user to more groups that you think the user might require. 
The groups are stored in /etc/group (and will require sudo to edit them).

I hope this helps,

Craig....

On 4/2/23 20:29, bctill wrote:
>
> Hi Jeremy --
>
> I guess my question is can I do the opposite of what you suggest? Can 
> I set up the system so I am automatically the superuser unless I 
> explicitly downgrade privileges for the process(es) created by 
> executing a particular command?
>
> And if I can do that, how do I prevent my web browser, for example, 
> from automatically inheriting all those superuser access rights?
>
> Regards,
> -- Bernie.
>
> _______________________________________________
> Discuss mailing list
> Discuss at vlug.org
> http://vlug.org/mailman/listinfo/discuss_vlug.org
-- 
IPv6 is the future, the future is here
ipv6hawaii.org