Comments on: Linux / Security: Sudo ‘sudo su -’ vs ‘sudo -s’ http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/ and linux between Wed, 08 Sep 2010 00:23:00 +0000 hourly 1 http://wordpress.com/ By: Anonymous http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-666 Anonymous Wed, 18 Aug 2010 11:57:33 +0000 http://blog.colovirt.com/?p=607#comment-666 the dash in "su -" brings in the environment of the user you're switching to, in this case since no user is specified the default is the root user. If you su (no dash) you will become root without executing the switched user's environment. So I guess the question in my mind is what's the difference between "sudo -s" and "sudo su" the dash in “su -” brings in the environment of the user you’re switching to, in this case since no user is specified the default is the root user.
If you su (no dash) you will become root without executing the switched user’s environment.
So I guess the question in my mind is what’s the difference between “sudo -s” and “sudo su”

]]> By: Kevin Goodman http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-228 Kevin Goodman Mon, 14 Sep 2009 14:55:55 +0000 http://blog.colovirt.com/?p=607#comment-228 Enable process accounting. This will at least get you the ability to follow an audit trail using timestamps. Can track what user was accessing the root account and the commands issued. Enable process accounting. This will at least get you the ability to follow an audit trail using timestamps. Can track what user was accessing the root account and the commands issued.

]]> By: mod http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-226 mod Sat, 12 Sep 2009 05:08:51 +0000 http://blog.colovirt.com/?p=607#comment-226 Very nice article! The problem I have is how to find out who is who in /var/log/secure. If there are 2 users on the system and both are working in a root shell it is impossible to find out what they did after switching to root. Any idea how to solve that? nice blog! keep up the good work! cheers Very nice article! The problem I have is how to find out who is who in /var/log/secure. If there are 2 users on the system and both are working in a root shell it is impossible to find out what they did after switching to root. Any idea how to solve that?

nice blog! keep up the good work!
cheers

]]> By: Kevin Goodman http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-204 Kevin Goodman Wed, 19 Aug 2009 09:03:01 +0000 http://blog.colovirt.com/?p=607#comment-204 Good information. Will check it out tomorrow. I am the same way, the less keystrokes the better! FYI, that wood burning stove in your flickr album is awesome. Sorry, forgot to add great post! Can't wait to see your next post! Good information. Will check it out tomorrow. I am the same way, the less keystrokes the better! FYI, that wood burning stove in your flickr album is awesome.
Sorry, forgot to add great post! Can’t wait to see your next post!

]]> By: Linux / Security: Sudo 'sudo su -' vs 'sudo -s' « Colocation to … | Linux Affinity http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-203 Linux / Security: Sudo 'sudo su -' vs 'sudo -s' « Colocation to … | Linux Affinity Wed, 19 Aug 2009 00:32:23 +0000 http://blog.colovirt.com/?p=607#comment-203 [...] is the original post: Linux / Security: Sudo 'sudo su -' vs 'sudo -s' « Colocation to … Posted in: [...] [...] is the original post: Linux / Security: Sudo 'sudo su -' vs 'sudo -s' « Colocation to … Posted in: [...]

]]> By: Kevin Goodman http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-202 Kevin Goodman Tue, 18 Aug 2009 22:27:30 +0000 http://blog.colovirt.com/?p=607#comment-202 Good information. Will check it out tomorrow. I am the same way, the less keystrokes the better! FYI, that wood burning stove in your flickr album is awesome. Good information. Will check it out tomorrow. I am the same way, the less keystrokes the better! FYI, that wood burning stove in your flickr album is awesome.

]]> By: qhartman http://blog.colovirt.com/2009/08/18/linux-security-sudo-sudo-su-vs-sudo-s/#comment-201 qhartman Tue, 18 Aug 2009 21:57:32 +0000 http://blog.colovirt.com/?p=607#comment-201 Note that "sudo -i" generally achieves the same thing as "sudo su -". It will "simulate initial login" of the runas_default user in sudoers, which is usually "root". In short, it is like "sudo -s" except that it does process the normal login settings files. It is what I tend to use when I need to get to a root shell as it is fewer keystrokes, and I am lazy. Note that “sudo -i” generally achieves the same thing as “sudo su -”. It will “simulate initial login” of the runas_default user in sudoers, which is usually “root”. In short, it is like “sudo -s” except that it does process the normal login settings files. It is what I tend to use when I need to get to a root shell as it is fewer keystrokes, and I am lazy.

]]>