mfillpot wrote:
I differ in my opinion, sudo represents a potential issue by allowing attackers to potentially access root rights from a standard user account, which may have a weak password. I think it is better practice to keep the root account, remove sudo rights except for specific actions and secure root with a difficult password. As for ssh that should be restricted to not allow root login and limit retries or only allow root ssh access via a key file.
sudo sux



The new TinCore is just that -- a minimal core one may add to as it pleases him. 