From owner-freebsd-questions@freebsd.org  Tue Mar 14 03:01:46 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8D485D0B315
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Tue, 14 Mar 2017 03:01:46 +0000 (UTC)
 (envelope-from merlyn@stonehenge.com)
Received: from 005.las.mailroute.net (005.las.mailroute.net [199.89.4.8])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.mailroute.net", Issuer "AlphaSSL CA - SHA256 - G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 7712D11C6
 for <freebsd-questions@freebsd.org>; Tue, 14 Mar 2017 03:01:46 +0000 (UTC)
 (envelope-from merlyn@stonehenge.com)
Received: from localhost (localhost.localdomain [127.0.0.1])
 by 005.las.mailroute.net (Postfix) with ESMTP id 3vhzvv699CzPk1q;
 Tue, 14 Mar 2017 02:58:51 +0000 (UTC)
X-Virus-Scanned: by MailRoute
Received: from 005.las.mailroute.net ([199.89.4.8])
 by localhost (005.las.mailroute.net. [127.0.0.1]) (mroute_mailscanner,
 port 10026)
 with LMTP id GF2vcgElcw5A; Tue, 14 Mar 2017 02:58:50 +0000 (UTC)
Received: from red.stonehenge.com (red.stonehenge.com [208.79.95.2])
 by 005.las.mailroute.net (Postfix) with ESMTP id 3vhzvt5YX0zPk1p;
 Tue, 14 Mar 2017 02:58:50 +0000 (UTC)
Received: by red.stonehenge.com (Postfix, from userid 1001)
 id 3F9861A15; Mon, 13 Mar 2017 19:58:50 -0700 (PDT)
From: merlyn@stonehenge.com (Randal L. Schwartz)
To: Harry Schmalzbauer <freebsd@omnilan.de>
Cc: freebsd-questions@freebsd.org
Subject: Re: sudo alternatives; for the minimalists
References: <58C6BDC0.7070307@omnilan.de>
x-mayan-date: Long count = 13.0.4.5.3; tzolkin = 13 Akbal; haab = 6 Cumku
Date: Mon, 13 Mar 2017 19:58:50 -0700
In-Reply-To: <58C6BDC0.7070307@omnilan.de> (Harry Schmalzbauer's message of
 "Mon, 13 Mar 2017 16:41:52 +0100")
Message-ID: <86d1dkef85.fsf@red.stonehenge.com>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Mar 2017 03:01:46 -0000

>>>>> "Harry" == Harry Schmalzbauer <freebsd@omnilan.de> writes:

Harry> I don't use it because I don't agree with the idea to authorize with the
Harry> user password which I already used for current credentials.

That's just to ensure that someone doesn't get to be root simply because
you left your account logged on while you walked away for a few minutes.

If you had to enter the *root* password, you now have a *shared*
credential, much harder to write policies for and account usage of.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn@stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix consulting, Technical writing, Comedy, etc. etc.
Still trying to think of something clever for the fourth line of this .sig