I have a question recently discover that apparently you can 'bypass' the needs to know root user password and just switch straight in as root user. So if you are the admin, you can have some users with sudo group level privileges. And without giving them root password, they will not able to login or switch to root user (normal condition ofc). Now they will require to enter sudo command to do any root admin level commands or operations. But they can also just do sudo su or sudo -i to switch to root user without knowing root user password. Now i have two big issues with this:
- In my opinion (correct me if i am wrong) - this is a big issue for security and also defeat the whole purpose of Linux structures. Because now they are as root does not need to know the root password.
- Auditing and logging - They are now as root, and those behaviour or actions run from user root are not logged without installing any third party auditd systems or tools.
I guess my questions is why linux allow this. For me this seems like a cheat bypass code.
Please correct me if my concerns or opinion are wrong. thanks