I have a client who I setup with a linux machine. He isn't very tech savvy, and obviously just needed a simple password to log onto ubuntu with. His username and password are something like:
user: John
password: GoodDeals
On the other hand, the root password on the machine is much more complex, and is something only I should have access to.
But when I use the command:
sudo su -
Ubuntu prompts for John's simple password and then grants root access to the entire machine.
This could be an issue, as once an employee knew the simple password to log onto the machine, they could essentially gain root access with it.
Is this intended behavior?
Why does knowing a user account password automatically give you root access?
/etc/sudoer
has a line forroot
.