News for hackers. Stuff that matters.
Re:Linux workstation security checklist by ams6110 on Friday August 28, 2015 @03:30PM (#10137416)
If you have unrestricted sudo, which is how most single-user systems are set up, your password is effectively the root password.
Re:Linux workstation security checklist by Alupis on Friday August 28, 2015 @04:27PM (#10137671)
> If you have unrestricted sudo [...] your password is effectively the root password.

Yes, but it keeps an audit trail of who's account was compromised, etc.

Re:Linux workstation security checklist by rsy96 on Saturday August 29, 2015 @07:54AM (#10139723)
With root privilege you can erase all of the audit logs. A malicious attack probably would do so if he/she cares about that.
Re:Linux workstation security checklist by fluidcruft on Saturday August 29, 2015 @01:10PM (#10140659)
You can't erase remote logs, or logs written to a write-only logging device (the one's I've seen seem essentially to be a serial port/usb device that emulates a line printer).
Re:Linux workstation security checklist by fluidcruft on Saturday August 29, 2015 @01:15PM (#10140675)
True, but that seems tangential to the question of whether using the same password for both the root account and LUKS encryption is bad advice.