Skip to end of metadata
Go to start of metadata
You are viewing an old version of this page. View the current version.
Compare with Current
View Page History
Version 1
Current »
Facts about Current Configuration
- The root user on
rcmaster
can use root privileges on rcnfs.
- The root user on each of the
rcXX
cannot use root privileges on rcnfs, due to root squashing by rcnfs.
- This implies that
root
on rcXX
is significantly less dangerous than root
on rcmaster
.
Policy
- We should generally favor
sudo
over logging in as root
almost all purposes.
- Those who require root privileges on the cluster machines should be added to the group
wheel
on each cluster machine, rather than having their public key added to /root/.ssh/authorized_keys
.
- Only those who can take the responsibility of rebuilding rcmaster or rcnfs should hold root privileges on either of those machines.