1 point
the whole security model of sudo makes no sense
I think that is a bit strong. Sure, you aren’t gaining much protection if you just allow sudo -su root
but there are a lot of valid use cases.
- Logging.
- A bit of an “explicit” check to keep you from doing something stupid without thinking.
- You can configure sudo to only allow specific commands from different users. (Maybe a trusted friend should have permission to reboot your Minecraft server but nothing else)