On Wed, Mar 28, 2012 at 10:48 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote:
Am 28.03.2012 15:43, schrieb suvayu ali:
> On Wed, Mar 28, 2012 at 15:35, Reindl Harald <h.reindl(a)thelounge.net> wrote:
>> Am 28.03.2012 15:26, schrieb suvayu ali:
>>> On Wed, Mar 28, 2012 at 15:18, Mark Haney <markh(a)abemblem.com> wrote:
>>>> markh ALL=(ALL) NOPASSWD: ALL
>>>
>>> This should be:
>>>
>>> %markh ALL=(ALL) NOPASSWD: ALL
>>
>> why? this would mean GROUP markh
>> see examples in /etc/sudoers!
>>
>
> Because I did _mean_ group markh. I had overlooked that you could
> specify individual users too. Since by default all users belong to a
> group named after itself, specifying as a group should work too.
one of the odd defaults many are not using
why should i have a group with the name of my user
if it has only one user - or why should i put the
user "caroline" in group "harry" except for chaos
no idea who invented this silly default, however, do not
assume all people are using defaults all the time
It was "invented" by a number of people who understood how to get
along without ACLs and capabilities and all the stupid machinery
necessary to support them.
Adding ACLs and capabilities to a *nix system is like giving the car
owner a rope to tie his car door shut when there's already a perfectly
good lock on the door. Or screen doors on a submarine, take your pick.
--
Joel Rees