Re:Linux workstation security checklist
by ams6110 on Friday August 28, 2015 @03:30PM
(#10137416)
If you have unrestricted sudo, which is how most single-user systems are set up, your password is effectively the root password.
[ Parent
| on HN ]
> If you have unrestricted sudo [...] your password is effectively the root password.
Yes, but it keeps an audit trail of who's account was compromised, etc.
With root privilege you can erase all of the audit logs. A malicious attack probably would do so if he/she cares about that.
Re:Linux workstation security checklist
by fluidcruft on Saturday August 29, 2015 @01:10PM
(#10140659)
You can't erase remote logs, or logs written to a write-only logging device (the one's I've seen seem essentially to be a serial port/usb device that emulates a line printer).
Re:Linux workstation security checklist
by fluidcruft on Saturday August 29, 2015 @01:15PM
(#10140675)
True, but that seems tangential to the question of whether using the same password for both the root account and LUKS encryption is bad advice.