Re: [tlug] on root logins (1)

[Uva Coder <uva.coder@example.com>]

On 12/28/05, Micheal E Cooper <mcooper@example.com> wrote:
> "Michael Reinsch" <mr@example.com> wrote:
>
> > OK, so Plan 9 removes an extra step - but sometimes this extra step
> > avoids or reduces the impact of mistakes...
>
> I am very interested in Plan 9 because I what I have heard of it.
>
> However, I do feel safer when it is necessary to consciously switch modes
> in order to get the power to really mess things up.
>
> How does Plan 9 keep those admin group users from accidentally wiping out
> the system?

From my point of view, preventing or recovering from a crash for
whatever reason has more to do with a plan and a policy, but having
things like venti and yesterday helps execute the  recovery process.

Well, as for switching modes, now we get into aesthetics a bit. I
suggest a simple answer...have 2 accounts. One for when you need to
perform sysadmin task. And another account for regular non-sysadmin
use.  IMO the primary reason for a sys (admin) user is for
installation, updating the system, or simple routine things like
adding users. Otherwise, userland belongs to the user. But like Linux,
if you need to upload web files or some other task you can do it as
part of a non-sysadmin group. At least that is my opinion. Perhaps
you'll hear a different view from 9fans mailing list. :-)

As for wiping out the system, the answer depends on your Plan 9
layout. I'll assume that the Plan 9 is not installed on a single
system alone and no RAID is involved. If the file server gets wiped,
you reinstall the file server using a CD and use the venti server to
repopulate the file server. If you wipe the venti server, then you
reinstall from backup then perform a snapshot of your file server. If
you wipe out both file and venti servers, then you reinstall both.
Then use your backups to repopulate the venti server, then the file
server from the venti. Of course, this is easier said than done. Some
competence is required.

Not to digress to much, Plan 9 can have multiple file servers and
venti servers. Redirection of services is not out of the equation.

For a better understanding, there's
http://plan9.bell-labs.com/sys/doc/ ,
http://plan9.bell-labs.com/wiki/plan9/Documentation/ or 9fans mailing
list archives.

That's my 2 cents. :-)

-vic