Re:The security hole in sudo
by tallanvor on Wednesday May 23, 2012 @02:08PM
(#4014411)
No, it's not administrator by default. The first user created is an administrator, but that user normally runs in a standard user security context. The prompt provides a temporary elevation to administrator level by use of an administrative security token associated with the account. The prompt also runs in a separate desktop to prevent malicious code from interfering with it.
If you try creating a new user through the control panel, you'll notice that the default selection is to create a standard user.
If you try creating a new user through the control panel, you'll notice that the default selection is to create a standard user.