News for hackers. Stuff that matters.

A comment on Richard Stallman on why GNU su didn't support the “wheel” group. Parent comment

Re:Richard Stallman on why GNU su didn't support the “wheel”... by zeroimpl on Friday August 18, 2023 @09:29PM (#37184521)
Yeah I don’t really understand why when I ssh into a VM in the cloud I have to first connect as a static dummy username like ec2-user then sudo to root.
[ Parent | on HN ]
Re:Richard Stallman on why GNU su didn't support the “wheel”... by effie on Saturday August 19, 2023 @01:08PM (#37190845)
Yeah. From http://ec2-downloads.s3.amazonaws.com/AmazonLinuxAMIUserGuid... :

> To prevent remote root exploits, the Amazon Linux AMI does not allow remote root login via SSH[...] By default, the only account that can log in remotely via SSH is ec2-user. The ec2-user has sudo privileges.

Can someone please explain how this makes any sense for better security. It seems to be just a security theater.

[ Parent | on HN ]