Re: [SAGE] Security tokens

[Jim Hickstein <jxh@jxh.com>]

>> And yes, certain things (like "sudo /bin/sh") are considered <i>prima
>> facie</i> acts of wrongdoing, meaning that I can convince HR to take
>> steps.
>
> Why? If that function works, it must be because you allowed it.

Because it defeats sudo's auditing.  This is for sysadmins generally, where 
sudo ALL=ALL is considered slightly better than handing out the (reusable) 
root password to a bunch of people.

And one doesn't go to HR first, of course.  One asks for an explanation, 
and then reminds them of the policy.