Article View: alt.folklore.computers
Article #623826Re: First use of /sbin in Unix?
From: Ahem A Rivets Shot
Date: Sun, 10 Jun 2018 10:17
Date: Sun, 10 Jun 2018 10:17
50 lines
4075 bytes
4075 bytes
On 10 Jun 2018 09:43:15 GMT Huge <Huge@nowhere.much.invalid> wrote: > Oh, Ghod. Takes me back to the horror of rolling out and maintaining > sudoers files on 9000 servers at $(MEGABANK), and trying to get developers Yeuch! Puppet springs to mind - or maybe a cron job fetching sudoers from a protected publishing point periodically. > who get root for a valid reason (*), and then add themselves to the > sudoers file, fired. Ah, then there are the ones who stash a setuid copy of /bin/sh somewhere or ... The tricks of developers wanting to hang on to root access are legion. I have worked in a place where there was for a while a spectacularly incompetent sysadmin who couldn't be fired for political reasons - certain trusted developers were *expected* to maintain root back doors and clean up after him. Eventually I got him to trust me to help keep him from screwing up - he was about as safe with a root password as a three year old with a jar of nitroglycerine. > (* Them; "We have to have root to operate our systems (+)" > Me; "Then your systems are broken. Go away and redesign them.") OK - now we need root to install the redesign, it's the *last* time ... ... ... Erm - can we have root please, we need to fix the mess we made of the redesign I recall one place where developers were running SQL commands by hand on live production databases containing payment data to update the schema for a software update. There was a staging environment, so they got to practice doing it. It took a while to fix that one. > (+ Mostly because they didn't understand groups and how to apply them > to file ownership so their systems could share files.) Oh dear. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/
Technical Details
Message-ID:
<20180610111712.5fcbfc3b36a1bdecd6e9d5ef@eircom.net>Path:
mbox-mo1.pugleaf.net!z3-v6ni2390iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin.stu.neva.ru!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mailReferences:
<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <slrnphgdv7.31ka.grahn+nntp@frailea.sa.invalid> <sfXRC.288871$yc1.96733@fx40.iad> <slrnphi8k3.31ka.grahn+nntp@frailea.sa.invalid> <pfbuep$lb$1@tncsrv09.home.tnetconsulting.net> <slrnphn6rh.31ka.grahn+nntp@frailea.sa.invalid> <pfhh9q$jsc$1@tncsrv09.home.tnetconsulting.net> <fo337lFingjU15@mid.individual.net> <fo4a5jF10ltU3@mid.individual.net>Show Full Headers
Complete Article Headers
X-Received: by 2002:a6b:30ca:: with SMTP id w193-v6mr6210342iow.95.1528626604682; Sun, 10 Jun 2018 03:30:04 -0700 (PDT) X-BeenThere: alt.folklore.computers@googlegroups.com Received: by 2002:a24:5a83:: with SMTP id v125-v6ls1058971ita.6.canary-gmail; Sun, 10 Jun 2018 03:30:03 -0700 (PDT) X-Received: by 2002:a24:190b:: with SMTP id b11-v6mr6599806itb.36.1528626603863; Sun, 10 Jun 2018 03:30:03 -0700 (PDT) Path: mbox-mo1.pugleaf.net!z3-v6ni2390iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin.stu.neva.ru!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail From: Ahem A Rivet's Shot <ste...@eircom.net> Newsgroups: alt.folklore.computers Subject: Re: First use of /sbin in Unix? Date: Sun, 10 Jun 2018 11:17:12 +0100 Organization: A noiseless patient Spider Lines: 50 Message-ID: <20180610111712.5fcbfc3b36a1bdecd6e9d5ef@eircom.net> References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <slrnphgdv7.31ka.grahn+nntp@frailea.sa.invalid> <sfXRC.288871$yc1.96733@fx40.iad> <slrnphi8k3.31ka.grahn+nntp@frailea.sa.invalid> <pfbuep$lb$1@tncsrv09.home.tnetconsulting.net> <slrnphn6rh.31ka.grahn+nntp@frailea.sa.invalid> <pfhh9q$jsc$1@tncsrv09.home.tnetconsulting.net> <fo337lFingjU15@mid.individual.net> <fo4a5jF10ltU3@mid.individual.net> Mime-Version: 1.0 Injection-Info: reader02.eternal-september.org; posting-host="c0ce42da7bf422f4b3bd304f2e88e36a"; logging-data="8128"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX18mhus5f8056YyjNnsEgYWnxQpHgAvUzU4=" Cancel-Lock: sha1:A+Jk494830Z0Wp9cB2QfHcE0yps= X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) X-Clacks-Overhead: "GNU Terry Pratchett" Bytes: 3677 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit