5

The official BAMT faq says "never use sudo. never never, always log in as root. [emphasis in original]". Is this a BAMT-specific issue, a more general issue with sudo that I should ask about on Super User or Server Fault, or what? I can't find any general complaints warranting this strong a reaction, and I can't find anything BAMT specific. Why, in an application where security is usually important, should I never use a tool which is designed to enhance security and which I've never heard this complaint about before?

1

In the absence of a reason, I'm going to assume it's specific to their distro, and they meant "we only created (and always use) the root account, so our documentation assumes you are logged in as root. We haven't tested for odd corner cases that arise because of subtle differences in the way sudo works".

sudo is considered more secure than logging in as root for a number of reasons. It should always be used on mainstream distros.

But for a tiny USB stick distro (with no ability to login as root over the network), the security benefits of sudo may not be worth the complexity.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.