Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Miah Johnson (miah@hachyderm.io)'s status on Thursday, 15-Aug-2024 00:47:04 JST Miah Johnson

   in reply to

   Both sudo and doas give you good logs for auditing who did what and when.

   su logs too but as most people just jump to a shell its less useful.

   Allowing shell execution via sudo, or doas will also mean you lose fine grained audits, which is where their configuration power comes in handy. As now you're specifying exactly what people can do, and that is what gets logged.