Comments on: How to Switch (su) to Another User Account without Password

By: hovercraft

hovercraft — Sun, 18 Jun 2023 08:21:17 +0000

Note: when editing /etc/pam.d/su the place where you insert your rules is important! Do it right after 'auth sufficient pam_rootok.so' line at the top of the file, otherwise it will not work.

By: dfasgag

dfasgag — Thu, 30 Jun 2022 11:36:48 +0000

Wrong, sudo and su should never be used together...

By: Jalal

Jalal — Tue, 06 Oct 2020 07:46:23 +0000

Thank you so much for the great topic,

By: dragonmouth

dragonmouth — Sat, 03 Oct 2020 17:10:08 +0000

While passwordless login creates convenience, it also creates a security hole. Should a bad actor obtain your userid, (s)he can copy and/or destroy your entire database setup. As the database breaches at Equifax, Target, Yahoo, and hundreds of other companies show, hackers do not need any help, such as passwordless sign-ins, in breaking in.

From a security standpoint, things should be made more complicated, rather than more convenient. Each user should have his or her own strong password so that in case of a breach it can be known which userid was compromised.

The price of convenience is security.