I want to remove my default user from the
sudo group. IOW I want to change it to an unprivileged account. However it also seems to be a member of ten other system groups.
What is the overall security implication of this. Are any of these groups also root-equivalent (like if you grant a user access to Docker)?
How important are these groups? If I remove my user from them, am I setting myself up for ten different troubleshooting sessions later on? (Probably having to just re-enable them, i.e. this would just be imposing suffering on myself).
List of groups for the user created by the installer, taken from a near-untouched Debian 8 install (test VM):
cdrom floppy sudo audio dip video plugdev netdev lpadmin scanner bluetooth
Context: I'm trying to implement privilege separation. I'd like to have a sysop user which can do root-only tasks, and has ssh access to a similar server account. The idea is to provide better containment for online entertainment, without giving up remote administration entirely.
E.g. ransomeware seeking to corrupt the backups on my server would require privilege escalation. It would not be able to reconfigure my normal user to capture
sudo passwords, or ssh access to the sysop account on the server.