On Wed, Nov 4, 2009 at 12:38 PM, Kevin Kofler <kevin.kofler(a)chello.at> wrote:
Richard June wrote:
> It's a good idea for one off jobs where the primary user is also the
> admin, but not so good for shared systems. Personally I think a better
> plan would be to display that information *only* if the user is
> flagged as an administrator, group root, wheel, etc.
It's actually a security risk to display this to non-admin users. It's like
putting a sticker on your door saying "This door is not locked because my
keyhole is not working."
Kevin Kofler
Perhaps I was unclear.
It's a good idea to display this for administrative users. Somebody in
the root or wheel group for example. But not so useful for normal
users.
--
Richard June
Orion Technology Solutions
574.933.1576
http://www.oriontechnologysolutions.com