On Tuesday 08 July 2003 22:21, Josh Welch wrote:
>Gene Heskett said:
>> Humm...  Josh, an even better question might be, howinhell did it
>> get commented out?  I'd be wearing my sherlock cap on that one. 
>> Walking very softly, and listening very carefully.
>
>Well, I am not the only one with root access to this particular
> machine currently. It is an unpleasant situation which I am working
> on rectifying, Developer's should *not* be given root access on
> production machines. End of story.

Maybe. Sometimes its unavoidable.  I once gave one of the amanda 
developers root on my office machine.  That resulted in a much better 
version of chg-scsi for everyone.  But, when he was done, root got 
itself a brand new password.

Would I do it again for that person?  In a heartbeat.  But I'd have to 
shut the firewall down even then unless I could write a quick and 
dirty rule for iptables that would pass him.  That machine had a 
fixed IP address too, this one does not, further compounding the 
problems for him I'm afraid.

>Josh

-- 
Cheers, Gene
AMD K6-III@500mhz 320M
Athlon1600XP@1400mhz  512M
99.26% setiathome rank, not too shabby for a WV hillbilly
Yahoo.com attornies please note, additions to this message
by Gene Heskett are:
Copyright 2003 by Maurice Eugene Heskett, all rights reserved.