Risk of granting sudo to a user account

Portal Home > Knowledgebase > Articles Database > Risk of granting sudo to a user account

Posted by four4, 08-05-2015, 10:26 PM
I have a developer that is currently working on our website and he is asking to grant sudo so he could work faster. What are the risk of giving sudo?
Posted by my247webhosting, 08-05-2015, 11:42 PM
Before giving sudo access make sure you backup all data locally If the developer you have hired is trustable you can give sudo access or privileges what is needed from developing prespective.
Posted by Kloudy Day, 08-06-2015, 01:33 AM
A developer must not have a sudo permissions, that's for system admin. Sudo comes down to trust, if you do then it's fine. The risk is going to be broken server when it comes down to misuse.
Posted by Srv24x7, 08-06-2015, 02:45 AM
Hi, I dont think web developer will need any sudo access, a normal user access is more than enough for activities, after he has to work only specific path and he already has full access to the path where the site is stored.
Posted by CharlsJoseph, 08-06-2015, 03:43 AM
Hello, It's better you need to confirm what changes he need to done on the server and let your server admin know about those changes. All developers may not have sufficient knowledge in server management, so it is not recommended to provide sudo access to developer. Also almost things can be done by a developer using normal access.
Posted by SneakySysadmin, 08-06-2015, 02:19 PM
There is never any reason for a web site developer to need root level access to the server. If they need changes to the Apache config or php.ini settings, they can ask for those changes to be made. ... but if they think they need root to make the web site work then I absolutely guarantee you that developer is doing something supremely stupid.
Posted by BeZazz, 08-06-2015, 02:27 PM
I admin a server for a UK company. If their developers need anything done server wise, it goes through me and I do it. IMO developers do not require that level of access and if they need a module installed etc it should be passed onto whoever handles the admin of the server.
Posted by Onra Host, 08-06-2015, 03:11 PM
Have you asked him what he needs Sudo for? Or even more importantly how sudo is going to help him work faster?
Posted by zacharooni, 08-06-2015, 03:32 PM
Sure he can have sudo, on a dev box with a scrubbed copy of the database..

Add to Favourites Print this Article