# Feedback from a first time user **URL:** \ **Category:** Blue Skies\ **Created:** [June 10, 2024, 2:15pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250 "2024-06-10T14:15:33Z")\ **Posts on this page:** 16\ **Page:** 5
**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\ **Post date:** [June 12, 2024, 8:40pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/81 "2024-06-12T20:40:53Z")
That’d be a hosting provider choice, I guess (likely a bad one). Google does that on their VMs in Google Compute Engine. Amazon might do it, too, on EC2, I’m not sure. Been a while since I managed any EC2 instances. ---
**Author:** ![cyberndt](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/c/a4c791/32.png) [@cyberndt](https://forum.virtualmin.com/u/cyberndt)\ **Post date:** [June 12, 2024, 8:43pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/82 "2024-06-12T20:43:58Z")
But like I mentioned above earlier, we use a trust zone policy with ipset to allow our office and home IPs only to access ports to manage the servers. If we use Webmin, those ports are closed to public access. ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 12, 2024, 8:47pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/83 "2024-06-12T20:47:01Z")
On webmin yes… Run this script as a user… ```auto #!/usr/bin/env bash username=$USER sudo su userdel -f $username exit ``` And then imagine you got something on your system (malware), that creates this file, `chmod +x` and runs it, because you know, you can do that without needing a password… ```auto #!/usr/bin/env bash sudo -rf / --no-preserve-root echo "sucker, you no longer have a root" ``` Have fun with that… xD Just to be safe… **DO NOT RUN ANY OF THE SCRIPTS!!!** ---
**Author:** ![cyberndt](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/c/a4c791/32.png) [@cyberndt](https://forum.virtualmin.com/u/cyberndt)\ **Post date:** [June 12, 2024, 8:58pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/84 "2024-06-12T20:58:13Z")
> [@anon50555658](#): > > On webmin yes… > > Run this script as a user… I have no words for your actions other than I’m out of this conversation… ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 12, 2024, 9:01pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/85 "2024-06-12T21:01:07Z")
Just be careful, not having a sudo password is top 3 things recommended AGAINST by security experts. With no1 being “do not have password: password123” and no2: “do not click on unknown links in emails.” xD I’m not typing that to make you angry, it’s just a fact you really should consider enabling a password check when escalating privileges. If it is that you have to type it over and over when you feel the credentials should still be valid, you can increase the time it takes before it asks again… The timeout… create /etc/sudoers.d/10-password\_timeout (010\_password-timeout on debian based) ```auto Defaults timestamp_timeout=10 # for 10 mins, IIRC 5 is default ``` `sudo chmod 440 /etc/sudoers.d/10-password_timeout` ---
**Author:** ![cyberndt](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/c/a4c791/32.png) [@cyberndt](https://forum.virtualmin.com/u/cyberndt)\ **Post date:** [June 12, 2024, 9:11pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/86 "2024-06-12T21:11:38Z")
> [@anon50555658](#): > > Just be careful, not having a sudo password is top 3 things recommended AGAINST by security experts. > With no1 being “do not have password: password123” and no2: “do not click on unknown links in emails.” xD Not one person here has mentioned ANYTHING about NOT having a SUDO password. Please do your research on what `NOPASS` actually means in SUDO environment… I honestly think you are taking things out of context and over reacting because you are not understanding the subject… So yes, on that note I am out of this conversation with you… ---
**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\ **Post date:** [June 12, 2024, 10:18pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/87 "2024-06-12T22:18:19Z")
> [@Joe](#): > > It’s just making terminal behavior align with what all other terminal sessions would do, when logged in a non-root sudo-capable user. (At least, I assume/hope that’s what Ilia is implementing. We shouldn’t do something weird here. It needs to act like any other terminal.) Yes, agreed. That’s exactly what I was implementing. ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 12, 2024, 10:19pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/88 "2024-06-12T22:19:49Z")
> [@cyberndt](#): > > Not one person here has mentioned ANYTHING about NOT having a SUDO password. > Please do your research on what `NOPASS` actually means in SUDO environment… Ok, calm down… Stones in glasshouses and all that… From `man sudoers` > By default, sudo requires that a user authenticate him or herself before running a command. This behavior can be modified via the NOPASSWD tag ---
**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\ **Post date:** [June 12, 2024, 10:26pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/89 "2024-06-12T22:26:22Z")
I wonder, when I go outside for a walk, am I running as _root_, as a _sudo_-capable user, or neither? ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 12, 2024, 10:27pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/90 "2024-06-12T22:27:13Z")
If you walk, no… If you run however… 🫠 ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 16, 2024, 3:12pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/91 "2024-06-16T15:12:37Z")
Saw there was an update on the dev version. Looks great! 🙂 ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/8/8d5ceeb282450196cf62fd9896acca3434d07275.png) ---
**Author:** ![jimr1](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jimr1/32/14173_2.png) [@jimr1](https://forum.virtualmin.com/u/jimr1)\ **Post date:** [June 16, 2024, 4:11pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/92 "2024-06-16T16:11:24Z")
Start a new thread this one is 90 posts deep, and perhaps has no relevance to the topic title ---
**Author:** ![anon50555658](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/ccd318/32.png) [@anon50555658](https://forum.virtualmin.com/u/anon50555658)\ **Post date:** [June 16, 2024, 4:58pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/93 "2024-06-16T16:58:28Z")
Really? I give positive feedback about a change that was made in response to this thread, and this is the response you go with? I’m so sorry, I will never post on this forum again. Holy crap this forum is toxic… ---
**Author:** ![jimr1](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jimr1/32/14173_2.png) [@jimr1](https://forum.virtualmin.com/u/jimr1)\ **Post date:** [June 16, 2024, 6:54pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/94 "2024-06-16T18:54:27Z")
What are you on about ? The thread is 90 posts long there is no chance anyone who reads this thread will understand it’s purpose as it is too long … if you feel I’m toxic fair enough ---
**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\ **Post date:** [June 16, 2024, 8:27pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/95 "2024-06-16T20:27:50Z")
I’d like to ask everyone to please stay strictly focused on the technical side of the discussion. ---
**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\ **Post date:** [August 15, 2024, 8:27pm UTC](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250/96 "2024-08-15T20:27:51Z")
Closed on August 15, 2024, 8:27pm UTC This topic was automatically closed 60 days after the last reply. New replies are no longer allowed. [Previous page](https://forum.virtualmin.com/t/feedback-from-a-first-time-user/127250.md?page=4)