[cap-talk] Fwd: Disempowering the Singular Sysadmin?

[John Carlson]

Here's an article where capabilities could be discussed.

John

Begin forwarded message:

> Date: January 10, 2011 7:39:00 AM PST
> Subject: Disempowering the Singular Sysadmin?
> Source: Slashdot
> Author: kdawson
> 
> An anonymous reader writes "Practically every computer system appears to be at the mercy of at least one individual who holds root (or whatever other superuser identity can destroy or subvert that system). However, making a system require multiple individuals for any root operation (think of the classic two-key process to launch a nuke) has shortcomings: simple operations sometimes require root, and would be enormously cumbersome if they needed a consensus of administrators to execute. There is the idea of a Distributed Administration Network, which is like a cluster of independently administered servers, but this is a limited case for deployment of certain applications. And besides, DAN appears still to be vaporware. Are there more sweeping yet practical solutions out there for avoiding the weakness of a singular empowered superuser?"
>  
> 
> Read more of this story at Slashdot.
> 
> 
> 
> 
> 
> 
> 
> 
> Read more…
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20110110/68c0237b/attachment.html