From owner-freebsd-security@FreeBSD.ORG Thu Jul 21 16:35:29 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 30C5516A41F for ; Thu, 21 Jul 2005 16:35:29 +0000 (GMT) (envelope-from asym@rfnj.org) Received: from mail.rfnj.org (ns1.rfnj.org [66.180.172.156]) by mx1.FreeBSD.org (Postfix) with ESMTP id CED0C43D4C for ; Thu, 21 Jul 2005 16:35:28 +0000 (GMT) (envelope-from asym@rfnj.org) Received: by mail.rfnj.org (Postfix, from userid 65534) id 9740E316; Thu, 21 Jul 2005 12:35:15 -0400 (EDT) Received: from megalomaniac.rfnj.org (ool-45736df1.dyn.optonline.net [69.115.109.241]) by mail.rfnj.org (Postfix) with ESMTP id 0E8622E5 for ; Thu, 21 Jul 2005 12:35:14 -0400 (EDT) Message-Id: <6.2.1.2.2.20050721122658.038f8508@mail.rfnj.org> X-Mailer: QUALCOMM Windows Eudora Version 6.2.1.2 Date: Thu, 21 Jul 2005 12:36:16 -0400 To: freebsd-security@freebsd.org From: asym In-Reply-To: <20050721155241.GA20438@frontfree.net> References: <42DCC503.5000408@ludd.ltu.se> <20050719213356.GA1614@gothmog.gr> <20050721101331.GB854@trit.org> <24999.192.35.35.35.1121959413.squirrel@192.35.35.35> <20050721155241.GA20438@frontfree.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on rfnj.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=20.0 tests=none autolearn=failed version=3.0.4 Subject: Re: Adding OpenBSD sudo to the FreeBSD base system? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2005 16:35:29 -0000 Personally, I would like to see sudo not only in the base system, but in the base system with a default configuration that mimics su(1) and thus replaces it entirely. The only difference is which password you need to provide. After a period for migration (or perhaps just in 6.x and noted in the release notes), su could become just a symlink to sudo. sudo is something I install on absolutely every box, usually symlinking su as above.