Skip to main content
replaced http://unix.stackexchange.com/ with https://unix.stackexchange.com/
Source Link

I'm planning to follow the steps described in this answerthis answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the screensaver, but I don't want to type it every time I need to sudo something.

My questions: is there any security issue I should be aware of by making this change? Will my protection be "weaker" than having the same super-secure password for everything (for example, root can log in with the insecure password)? Is there any better way to archive this?

Please consider even the worst-case scenario, ie, the attacker has physical access to my computer (logged out from my account).

Some details probably worth mentioning: No other user account in my computer is sudoer (nor will be). home directory encrypted.

I'm planning to follow the steps described in this answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the screensaver, but I don't want to type it every time I need to sudo something.

My questions: is there any security issue I should be aware of by making this change? Will my protection be "weaker" than having the same super-secure password for everything (for example, root can log in with the insecure password)? Is there any better way to archive this?

Please consider even the worst-case scenario, ie, the attacker has physical access to my computer (logged out from my account).

Some details probably worth mentioning: No other user account in my computer is sudoer (nor will be). home directory encrypted.

I'm planning to follow the steps described in this answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the screensaver, but I don't want to type it every time I need to sudo something.

My questions: is there any security issue I should be aware of by making this change? Will my protection be "weaker" than having the same super-secure password for everything (for example, root can log in with the insecure password)? Is there any better way to archive this?

Please consider even the worst-case scenario, ie, the attacker has physical access to my computer (logged out from my account).

Some details probably worth mentioning: No other user account in my computer is sudoer (nor will be). home directory encrypted.

Source Link
berbt
  • 300
  • 1
  • 2
  • 15

Different password for login and sudo - security concerns

I'm planning to follow the steps described in this answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the screensaver, but I don't want to type it every time I need to sudo something.

My questions: is there any security issue I should be aware of by making this change? Will my protection be "weaker" than having the same super-secure password for everything (for example, root can log in with the insecure password)? Is there any better way to archive this?

Please consider even the worst-case scenario, ie, the attacker has physical access to my computer (logged out from my account).

Some details probably worth mentioning: No other user account in my computer is sudoer (nor will be). home directory encrypted.