From owner-freebsd-security@FreeBSD.ORG Thu Jul 21 18:55:07 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9692416A42C for ; Thu, 21 Jul 2005 18:55:07 +0000 (GMT) (envelope-from mhunter@malcolm.berkeley.edu) Received: from malcolm.berkeley.edu (malcolm.Berkeley.EDU [128.32.206.239]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7DB2A43D86 for ; Thu, 21 Jul 2005 18:54:57 +0000 (GMT) (envelope-from mhunter@malcolm.berkeley.edu) Received: from malcolm.berkeley.edu (localhost [127.0.0.1]) by malcolm.berkeley.edu (8.13.3/8.13.3) with ESMTP id j6LIsvjM027003 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 21 Jul 2005 11:54:57 -0700 (PDT) (envelope-from mhunter@malcolm.berkeley.edu) Received: (from mhunter@localhost) by malcolm.berkeley.edu (8.13.3/8.13.3/Submit) id j6LIsucx027002; Thu, 21 Jul 2005 11:54:57 -0700 (PDT) (envelope-from mhunter) Date: Thu, 21 Jul 2005 11:54:56 -0700 From: Mike Hunter To: Stephen Major Message-ID: <20050721185456.GA26578@malcolm.berkeley.edu> References: <42dfec65.1f79c486.1943.1e58@mx.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42dfec65.1f79c486.1943.1e58@mx.gmail.com> User-Agent: Mutt/1.5.6i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.6 (malcolm.berkeley.edu [127.0.0.1]); Thu, 21 Jul 2005 11:54:57 -0700 (PDT) Cc: freebsd-security@freebsd.org Subject: Re: FW: FW: Adding OpenBSD sudo to the FreeBSD base system? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2005 18:55:07 -0000 On Jul 21, "Stephen Major" wrote: > Sudo requires extra configuration that su does not. > > Why should I have to waste my time configuring another app just because a > handful of people want it? I like su and how it works and I guarantee I am > not the only one. You want it replaced replace it your self > cd /usr/ports/security/sudo && make install clean > > That simple! Don't waste our time because you want something to be easier > for you Last week I had to do a little work on a 1980's AT&T Unix box. I'm glad that yours isn't the only opinion that has shaped the evolution of unix, or else I'd probably still be using such OSes all day! Sudo is a great tool, and adding it as part of the base system would be a great way to advance the FreeBSD security and usability baseline. After time, maybe enough people would start using sudo in place of su and it would be time to consider retiring su...a process that has happened thousands of times as a natural part of an evolving OS. Mike