Discussion on:

Message 63 of 77
0 Votes
+ -
Who doesn't want it to work differently?
I do, you probably do, grandma won't give a crap.

So the answer is....

Why does grandma have to su at all?
If having to switch roles is the problem, why not implement privilege separation, and then set it up so all grandma's tasks can be done at the level she's comfortable with?

Inconvenience isn't good security, it's bad design....
Posted by Tony Hopkinson
22nd Oct 2010