Prev: CUPS upgrade from Lenny to Squeeze breaks encryption - HELP
Next: reportbug nscd did not find bugs on bugs.debian.org
From: Jordan Metzmeier on 29 Jul 2010 08:40 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 07/29/2010 06:08 AM, Jordon Bedwell wrote: > > I opt to pipe to grep because I usually do a lot more complicated things > with find and over time, I just kept using grep, it's a personal > preference really. Just like using locate is far faster than using find > and find -name is slower and so forth on down the line. I've never been > a big fan of locate though because it can miss on some machines with > horrible i/o. For me it something that I just cringe to see. I realize that in practice, it is not bad. I just cannot get over feeling uneasy when seeing things like: find | grep cat | grep ls -l | grep for i in $(ls -l foo/) sudo su I realize that all of it can be used to accomplish a task. So why do I hate to see it so much? - -- Jordan Metzmeier -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCAAGBQJMUXYnAAoJEKj/C3qNthmTwS8P/1pNyVI9DD8llA95oAvQ+7ig mr64j52Ovd7763Jg6J1Wk7BroGQ+Gc/9ipsijmeDoJ6wAO6S/1uX7NnwXMBU48eb vyZxVroCbfEvDp7cX0LF7wMS4FJk+FxlWdo75+AAekBO2pGFg7ynov0D4elfN35V fz/+zNoBvXyZS3LIVx9Idy6d0YLFyVURMbHy6YEuxvWOHxhxoBvvJWR+USCiIk8R aNIljPxNKi0yjJsk9GTZmSVVSDCaofgbu2xAT01WHkoV2F8VTxAMrt7WSwQRsHBN TeLDjd/4nSztjHie4lDnKA72V23r+SXvl/mzY+SwZEbrWa9i09QoaeQn1rmpd2W0 x3hH56iYzPTJyn5OJWDdNa0awMtcUJ0e96KF80jAjv6tR8gZquNHObC0/UHaizf1 EdzNBrMh6qCiR8vl2+cidTW967wh2d36frwnU0lCJGx4S71bz1DZt4LLWAO9utMq CxovXNu+677ENBTDyNcvzBis8BhvU1VYtg0MAaDwCq5hBwhGwE7bwsw0uAe9D25k +4dGDYe3g1qz+C4Jwbo2ralOTOVkuDqiDDr3qy6tlMZORo3twGw+zeQrDfGIK4QC iZ09HYNAmf6ye75PNR3jFys+aSAW6j2KHs/rgWILBmIlhbA3RVbMdKTRYe/kHMdB Cy0ClzXvX9I5W+rfmcAH =5Hfr -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/4C517628.1010708(a)gmail.com
From: Eduardo M KALINOWSKI on 29 Jul 2010 12:30 On Qui, 29 Jul 2010, "Boyd Stephen Smith Jr." wrote: > I understand your issues with all but the last one. A user may need to "sudo > su" due to configuration outside of their control. A system that > requires you > to "sudo su" for some task is likely misconfigured, but it is a > useful tool to > have around, as a user. sudo -i -- The optimist thinks that this is the best of all possible worlds, and the pessimist knows it. -- J. Robert Oppenheimer, "Bulletin of Atomic Scientists" Eduardo M KALINOWSKI eduardo(a)kalinowski.com.br -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/20100729132551.89225ubuopeo64cg(a)mail.kalinowski.com.br
From: Boyd Stephen Smith Jr. on 29 Jul 2010 12:30 On Thursday 29 July 2010 07:38:00 Jordan Metzmeier wrote: > For me it something that I just cringe to see. I realize that in > practice, it is not bad. I just cannot get over feeling uneasy when > seeing things like: > > find | grep > cat | grep > ls -l | grep > for i in $(ls -l foo/) > sudo su > > I realize that all of it can be used to accomplish a task. So why do I > hate to see it so much? I understand your issues with all but the last one. A user may need to "sudo su" due to configuration outside of their control. A system that requires you to "sudo su" for some task is likely misconfigured, but it is a useful tool to have around, as a user. The rest are less useful, and generally imply a limited, incomplete, or flawed understanding of one or more of the tools you are using. -- Boyd Stephen Smith Jr. ,= ,-_-. =. bss(a)iguanasuicide.net ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.net/ \_/
From: Jordan Metzmeier on 29 Jul 2010 12:40 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 07/29/2010 12:22 PM, Boyd Stephen Smith Jr. wrote: > > I understand your issues with all but the last one. A user may need > to "sudo su" due to configuration outside of their control. A system > that requires you to "sudo su" for some task is likely misconfigured, > but it is a useful tool to have around, as a user. > > The rest are less useful, and generally imply a limited, incomplete, > or flawed understanding of one or more of the tools you are using. I no longer configure my machines in a way that it allows a user to gain full root via sudo. However, when I did, I found "sudo -i" to be more appropriate than "sudo su" which seems to be more like "su -l". Of course, you could always do "sudo su -l". - From the manpage: - -i The -i (simulate initial login) option runs the shell specified in the passwd(5) entry of the user that the command is being run as. The command name argument given to the shell begins with a '-' to tell the shell to run as a login shell. sudo attempts to change to that user's home directory before running the shell. It also ini‐ tializes the environment, leaving TERM unchanged, setting HOME, SHELL, USER, LOGNAME, and PATH, and unsetting all other environment variables. Note that because the shell to use is determined before the sudoers file is parsed, a runas_default setting in sudoers will specify the user to run the shell as but will not affect which shell is actually run. - -- Jordan Metzmeier -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCAAGBQJMUazIAAoJEKj/C3qNthmTW7EQANHKUy7UW/YWxax3W5Z6C9nF T+0JP2a79FlwaQABCP3+0CLWlk4QGB+Oa9UqnttQP6SjE5dLz8oA27tJO2NQTAe+ /ZeiFFnAF3jAOlG7BTDxl4QolPJgqZ6cOkp8qcRSdOJdFDrvmk0NeF9JszRl8Amn 5LqnI0M8GVRvsdutDn50bEyi4LO3rLKsSEQuZNYl45tVRFjFB9ZgaAuINbj4FDF/ yya3NMT11B1ApSzwAWg1HZ8myTxIklJxJc3Hk/gfBsmdhfLtI0egxY4q5yJ7iuvx Q1mOFef2zrvT9l2fnxyplHCbMlgugwvAiTgZE9YBr3U1NGo85jCNVLjY9r2auh5+ hnz+uWflwi4y0bDiUiQnzJvnlM80NImyblyiqhY1FiOu7/D+Q94dWfhUEGcXxN+M rApuz+CCYjoHIxMV28nOIxtIYhlmXRnLjKh2OTTDzZqQXOdYKaxBS+k5l4n+jjfm LbZqlpAuOlXncgPn1BiB81f3nbthPsdGeCi14PF/5HjgqGpdOyy7lN14WOyWbzPO ny7UbY/knlJy+bdwFUQNMzXkpuEW57dB60KuAPlaoAf4VVCHME2nl7XJulwcM3Pw LTiM5phh4XrzPvEifzWI8fQhLbccCweHNy0tGbyaLlDwizbgzNTs0aojuYZSiWi7 L7L+ToFAZ1QSOLwcPEXY =9EEK -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/4C51ACC9.3010901(a)gmail.com
From: Boyd Stephen Smith Jr. on 29 Jul 2010 12:50 On Thursday 29 July 2010 11:25:51 Eduardo M KALINOWSKI wrote: > On Qui, 29 Jul 2010, "Boyd Stephen Smith Jr." wrote: > > I understand your issues with all but the last one. A user may need to > > "sudo su" due to configuration outside of their control. A system that > > requires you > > to "sudo su" for some task is likely misconfigured, but it is a > > useful tool to > > have around, as a user. > > sudo -i You can configure sudo to disallow opening a shell directly with the "-i" and "-s" options. That is why I indicated that "sudo su" would only be required with a mis-configured sudo installation. (If policy allows you to run "su" [or any shell] directly, then the "-s" and "-i" options should be allowed, as well.) Nitpick: (sudo su) is roughly equivalent to (sudo -s); (sudo -i) is roughly equivalent to (sudo su -). -- Boyd Stephen Smith Jr. ,= ,-_-. =. bss(a)iguanasuicide.net ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.net/ \_/
First
|
Prev
|
Next
|
Last
Pages: 1 2 3 4 Prev: CUPS upgrade from Lenny to Squeeze breaks encryption - HELP Next: reportbug nscd did not find bugs on bugs.debian.org |