From owner-freebsd-questions@FreeBSD.ORG Mon May 5 23:17:22 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DA4FA1065678 for ; Mon, 5 May 2008 23:17:22 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by mx1.freebsd.org (Postfix) with ESMTP id 9DBA08FC1C for ; Mon, 5 May 2008 23:17:22 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from fledge.watson.org (localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.2/8.14.2) with ESMTP id m45NHKml071299; Mon, 5 May 2008 19:17:20 -0400 (EDT) (envelope-from doug@fledge.watson.org) Received: from localhost (doug@localhost) by fledge.watson.org (8.14.2/8.14.2/Submit) with ESMTP id m45NHK2d071296; Mon, 5 May 2008 19:17:20 -0400 (EDT) (envelope-from doug@fledge.watson.org) Date: Mon, 5 May 2008 19:17:19 -0400 (EDT) From: doug To: Mario Vazquez In-Reply-To: Message-ID: <20080505191223.U24925@fledge.watson.org> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (fledge.watson.org [127.0.0.1]); Mon, 05 May 2008 19:17:21 -0400 (EDT) Cc: freebsd-questions@freebsd.org Subject: Re: Question about a recent installation X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: doug@safeport.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 May 2008 23:17:22 -0000 On Mon, 5 May 2008, Mario Vazquez wrote: > > I have been using different Linux distributions for some years, and decided to > give FreeBSD a try. The install was successful, but have a question about how > the root account is made. Found that the root folder was created with the > user/group privileges root:wheel. Is not that a kind of security risk? I > know that usually only the account used by the administrator is the one, in > addition to root, that belongs to the wheel group. But also I know that > sometimes admins get lazy and give for limited time extra privileges just to > allow someone to do something, and that's where the danger can come. Btw, > that's just my opinion. > _________________________________________________________________ To give limited priviledges I think sudo (as in linux??) would be used. If that does not provide enough security then kerberos could be used. In general I don't see how you main concern is unique to FreeBSD. DougD