From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: <7d4f94be6fb487bacbe3504f99e724c1@ladd.quanstro.net> References: <80191640-DB1A-4681-9289-8C17E0ED21F9@gmail.com> <7d4f94be6fb487bacbe3504f99e724c1@ladd.quanstro.net> Date: Wed, 1 Sep 2010 15:41:18 -0400 Message-ID: From: John Floren To: erik quanstrom Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: 9fans@9fans.net Subject: Re: [9fans] how to lock cpu console Topicbox-Message-UUID: 4cfbaa74-ead6-11e9-9d60-3106f5b1d025 On Wed, Sep 1, 2010 at 2:51 PM, erik quanstrom wrot= e: >> Those are reasonable points, definitely. Since I'm usually the only >> one to use my servers (except at Sandia, where I share with Ron), >> abusing my admin privs isn't a big deal. > > hey, isn't that the windows security model! =C2=A0:-) > > seriously, don't you open yourself up to more mistakes, > if you make it easy to do things as the hostowner? > > - erik > I don't *work* as bootes, I just set things up/fix things as bootes when the hostowner is absolutely required. I already put my account in the adm and sys groups, so I can get just about as much abuse as I want without ever logging in as the hostowner. John --=20 "With MPI, familiarity breeds contempt. Contempt and nausea. Contempt, nausea, and fear. Contempt, nausea, fear, and .." -- Ron Minnich