Unix security: Difference between revisions

Revision as of 10:34, 13 April 2024

Revision as of 10:35, 13 April 2024

Line 15:

===Root access===

[[File:Sudo on Ubuntu.png|thumb|Sudo command on Ubuntu to temporarily assume root privileges]]

Most Unix and Unix-like systems have an account or group which enables a user to exact complete control over the system, often known as a [[Superuser|root]] account. If access to this account is gained by an unwanted user, this results in a complete breach of the system. A root account however is necessary for administrative purposes, and for the above security reasons the root account is ''seldom'' used for day to day purposes (the [[sudo]] program is more commonly used), so usage of the root account can be more closely monitored. {{Citation needed|date=April 2024}}

Root access "as it should be" can be visualised by those familiar with the [[Superman]] stories using the following [[analogy]]:

::Using a root account is rather like being Superman; an administrator's regular user is more like Clark Kent. Clark Kent becomes Superman for only as long as necessary, in order to save people. He then reverts to his "disguise". Root access should be used in the same fashion. The Clark Kent disguise doesn't really restrict him though, as he is still able to use his super powers. This is analogous to using the sudo program.

==User and administrative techniques==