Seems like it’d actually decrease security as now there are several different “root” logins that could be compromised.
Though I suppose, with further thought, it’s not significantly worse than having them in sudoers, in that particular respect.
Though I suppose, with further thought, it’s not significantly worse than having them in sudoers, in that particular respect.
Sudoing into root from lowuser account is in some scenarios potentially more dangerous than just using both accounts separately, as the user who uses root regularly/very often gets accustomed to the fact his commands are powerful and can screw his system, so mistakes almost never happen. While sudoing all the time creates a false sense of security and the user is more likely to run harmful command with sudo.
> To prevent remote root exploits, the Amazon Linux AMI does not allow remote root login via SSH[...] By default, the only account that can log in remotely via SSH is ec2-user. The ec2-user has sudo privileges.
Can someone please explain how this makes any sense for better security. It seems to be just a security theater.