What specific vulnerabilities am I creating by disabling the sudo password?
I'm involved yet again in the old argument on whether
sudo without password is secure enough or not. I'm on the side of those who doesn't mind typing a password every time I use
sudo, even if it's less convenient, because it means that not just any script that runs on the server can include
sudo install-rootkit without me knowing it.
I also use it through multi-shell commands like
terminator to send identical commands to multiple remote servers (CentOS 5).
The argument from the other side is that it's redundant and just inhibits him from using his favourite multi-shell command.
Google'ing about "sudo best practices" I didn't find much discussion about this, it seems that people are generally OK with password-less
Am I in the minority?
Would PCI-DSS compliance make a difference? (we aren't PCI-complient yet, but it's in the cards).