From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1OidUK-0007VM-N6 for garchives@archives.gentoo.org; Tue, 10 Aug 2010 01:18:45 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 77084E0BCE; Tue, 10 Aug 2010 01:18:10 +0000 (UTC) Received: from mail-yw0-f53.google.com (mail-yw0-f53.google.com [209.85.213.53]) by pigeon.gentoo.org (Postfix) with ESMTP id 57A83E0BCE for ; Tue, 10 Aug 2010 01:18:10 +0000 (UTC) Received: by ywh2 with SMTP id 2so5817911ywh.40 for ; Mon, 09 Aug 2010 18:18:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:sender:received:date:from:to :subject:message-id:mail-followup-to:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=SvDdlwFXo8ENxBNR2NXIBzXxuvCMBFMX2imA53VZtqQ=; b=OBUVSQrWvk+IBbx46P2pCJcqbLQ6Bbqq5+S+Ws7T07OWu8GGxJ9tuCF/76PxsPiBfm zD8qx4sIvldo3S24W0AhgOfRhDeu0dPO+lOGK8F485uXbxSAPYUVKrprb6wkgoYIVBpe 5fY2thpHFJZhHAm0FABlGxDCQzFTAgz8iGMTs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=sender:date:from:to:subject:message-id:mail-followup-to:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; b=iiyFuUWAzC+A0EqlSjbzgB63eEUT5LBMtQ1//boWKHmB2UGtJnmL0f43f67iV6GcYy fDPYSCuo9lHJ/6fbG0gWZ/qlVpSLNkLzc0yoQT2uLEQN893C3UUoSv2d26NNdxATVoou TK6PNqVMjaAxgmbtM5izcDCoj50r4roLJPMyU= Received: by 10.150.170.7 with SMTP id s7mr18787114ybe.93.1281403090013; Mon, 09 Aug 2010 18:18:10 -0700 (PDT) Received: from linux1 (cpe-76-183-49-63.tx.res.rr.com [76.183.49.63]) by mx.google.com with ESMTPS id m11sm5367798ybn.4.2010.08.09.18.18.06 (version=SSLv3 cipher=RC4-MD5); Mon, 09 Aug 2010 18:18:08 -0700 (PDT) Sender: William Hubbs Received: by linux1 (sSMTP sendmail emulation); Mon, 09 Aug 2010 20:18:05 -0500 Date: Mon, 9 Aug 2010 20:18:05 -0500 From: William Hubbs To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Rooted/compromised Gentoo, seeking advice Message-ID: <20100810011805.GA15816@linux1> Mail-Followup-To: gentoo-user@lists.gentoo.org References: <201008092009.38665.michaelkintzios@gmail.com> <4C606312.5060105@gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.20 (2009-06-14) X-Archives-Salt: 095a70a0-d635-437c-ad4b-e8798180cc4b X-Archives-Hash: c77ed4da17b3f70c4204cf4b6fcb8538 On Mon, Aug 09, 2010 at 05:30:40PM -0700, Kevin O'Gorman wrote: > On Mon, Aug 9, 2010 at 1:20 PM, Bill Longman wrote: > > > On 08/09/2010 01:08 PM, Robert Bridge wrote: > > > On Mon, Aug 9, 2010 at 8:09 PM, Mick wrote: > > >> There have been discussions on this list why sudo is a bad idea and sudo > > on > > >> *any* command is an even worse idea. You might as well be running > > everything > > >> as root, right? > > > > > > sudo normally logs the command executed, and the account which > > > executes it, so while not relevant for single user systems, it STILL > > > has benefits over running as root. > > > > ...excepting, of course, "sudo bash -l" which means you've given away > > the keys to the kingdom. > > > > I actually prefer "sudo su -" -- as long as I'm giving it away! :o) Afaik, there is no reason for "sudo su -" It should be either su - or, if you are using sudo, sudo -i The disadvantage of "su -" is that it requires the user to know the root password. But, "sudo -i" does the same thing without requiring the user to know the root password. William