Security Basics: Re: SUDO vs root account question

["Joe Polk" <listuser () javelinux com>]

> Hi all,
> I have two quick questions related to the 'sudo' command;
> putting a certain user Mr.X with ALL=(ALL)ALL permissions in the
> sudoers file, gives him COMPLETE root previleges? In other words, if 
> I want that some people, for security reasons, stop using the root 
> account/password for accessing the servers, by crating a sudo user 
> with ALL previledges will decrease this risk? If this sudo account 
>  is compromised, will the cracker have COMPLETE root previleges?
Think of SUDO and "DO" this as "SU."  If I hack a user account with full sudo
access, I can make myself root.

--
<<JAV>>