Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I'm sudoer on a remote linux machine and would like to create another user with the maximum privileges, except the privilege of managing my account. I'm assuming a sudoer can delete or change the password of another sudoer.

share|improve this question

1 Answer 1

up vote 9 down vote accepted

The simple answer is that you can't. A user with root privileges can fatally harm your account in all kinds of way. Removing your account from the account database or changing your password is just one. Root can execute any process as your account, can snoop on everything done by any process on the system, can access and modify or remove your files, can access disks directly (bypassing all filesystem permissions), and so on.

If you want to give someone root privileges to perform a specific task, you can allow them to run only a specific command with sudo.

If you want to give someone broad privileges, give them on a virtual machine or virtual environment that you do not care about, and keep your account outside that virtual machine (in another VM or on the host system).

share|improve this answer
    
As for which virtualization technology: heavyweight virtualization such as KVM or VirtualBox will do. So will User mode Linux. I don't know about lightweight Linux-on-Linux solutions. –  Gilles Dec 24 '11 at 16:24
    
that's a shame. I expected the OS to have such capability. –  simpatico Dec 24 '11 at 17:37

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.