Kommentare zu: Is there any way to make a file inaccessible to root in linux?

Von: jplatt39

jplatt39 — Fri, 25 Jun 2010 15:07:40 +0000

Root is the administrative account period. If a file exists on that system, a root account can read it, execute it or delete it. Disabling the root account and doing everything through sudo is generally a good idea, even if it’s sometimes called the “paranoid Unix Admin’s approach” but the only way to “hide” a file from root is the way you hide it from everybody — by putting a dot in the front of the name. And that only works until they do an ls -a

Von: jacovkss2

jacovkss2 — Fri, 25 Jun 2010 15:04:24 +0000

No trust? Do you people really feel that a lowly* sys admin person should have access to sensitive business data? Sorry, but I totally agree with management here… (Boy, THERE’S a sentence I didn’t think would ever come out of keyboard!)

* Just trying to make a point!

Von: stevenmcconnon

stevenmcconnon — Fri, 25 Jun 2010 14:23:30 +0000

totally agreed. not a good client relationship if they cant trust you!

you need access before you can prevent giving yourself access right? perhaps httaccess, but you would still have access!

Von: Misc Tech Advice

Misc Tech Advice — Fri, 25 Jun 2010 14:19:05 +0000

Doesn’t sound like you have a very trustworthy relationship with your client.

If it makes them feel more comfortable, disable root account and use sudo for everything (Ubuntu approach).
If you have enough access to administer the box, then you will have enough access to be able to access the data in question.