Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Remove “This incident will be reported.” from user warnings

github.com

Post reply on HN
Print view View original

31–40 of 302 posts

Re: Remove “This incident will be reported.” from user warnings

#31

Post by electroly »

stefncb wrote: post #23
jamal-kumar wrote: post #18

Earlier quoted context omitted.

Yeah, I kind of lament them removing this warning if I'm going to be honest. It feels like something such as that should be more common best practice. Of course decent log collection/monitoring should also be able to catch authlog stuff and alert accordingly and I'm sure most organizations rely on solutions like that instead of letting things get lost in email

It's only removed if sudo doesn't send mail. It still warns if it's relevant.

This is a pretty short diff and it clearly does NOT do that, unless you're saying they went back later in another commit to add this. They removed the message in all situations. The string "This incident will be reported" has been removed from the source code; it could not possibly print that message now.

Re: Remove “This incident will be reported.” from user warnings

#32

Post by asveikau »

jamal-kumar wrote: post #18
dingledork69 wrote: post #13

Earlier quoted context omitted.

Or you set up your system so mail for root gets redirected to an smtp server with an actual inbox read by actual people

Yeah, I kind of lament them removing this warning if I'm going to be honest. It feels like something such as that should be more common best practice. Of course decent log collection/monitoring should also be able to catch authlog stuff and alert accordingly and I'm sure most organizations rely on solutions like that instead of letting things get lost in email

I feel like that warning comes right out of the era of multi-user machines with unprivileged shell accounts. That era is largely gone. Today, someone, possibly a less knowledgeable user, runs sudo on their single user laptop that they completely own outright, and may get confused who they're being "reported" to.

Re: Remove “This incident will be reported.” from user warnings

#33

Post by fafqg »

stefncb wrote: post #23
jamal-kumar wrote: post #18

Earlier quoted context omitted.

Yeah, I kind of lament them removing this warning if I'm going to be honest. It feels like something such as that should be more common best practice. Of course decent log collection/monitoring should also be able to catch authlog stuff and alert accordingly and I'm sure most organizations rely on solutions like that instead of letting things get lost in email

It's only removed if sudo doesn't send mail. It still warns if it's relevant.

This doesn't seem to be correct.

Re: Remove “This incident will be reported.” from user warnings

#34

Post by Kye »

bqmjjx0kac wrote: post #25
its-summertime wrote: post #11

Stressful message to see back when I was a clueless child. I'm glad its getting removed.

I had a similar reaction to Windows 95's "An illegal operation has occurred." I remember wondering whether the police were on their way.

I have genuinely had to reassure panicked relatives over this.

Re: Remove “This incident will be reported.” from user warnings

#37

Post by tomatodevice »

pram wrote: post #12

I was always disappointed it never summoned some grumpy graybeard unix admin from a dark server room basement to give me a chiding lecture.

I receive mails from sudo incidents generated by my users, I check the boxes except the gray beard.

Re: Remove “This incident will be reported.” from user warnings

#39

Post by elashri »

I remember the first time to have this message was at my first time using CERN lxplus during my undergrad. I was worried that people will think I am stupid to try "sudo apt-get" there. It was a mistake as I had several terminal sessions and forgot which one was the local.

Anyway fast forward today. I know the answer to the question to whom usually this notification gets sent. They forward it via SMTP server to the person on computing shift (at least for some of the experiments) based on the experiment this person (who tried sudo) account belongs too. probably also some IT email.

Anyway it is stressful for new and young people. but honestly I never read them. I have email rule to put them inside specific folder I don't usually open.

Re: Remove “This incident will be reported.” from user warnings

#40

Post by freedomben »

stefncb wrote: post #23
jamal-kumar wrote: post #18

Earlier quoted context omitted.

Yeah, I kind of lament them removing this warning if I'm going to be honest. It feels like something such as that should be more common best practice. Of course decent log collection/monitoring should also be able to catch authlog stuff and alert accordingly and I'm sure most organizations rely on solutions like that instead of letting things get lost in email

It's only removed if sudo doesn't send mail. It still warns if it's relevant.

Is there more to the change than the linked commit? Because if not, looking at the code change I don't see how you could possibly be correct. There is no additional logic/branching that could be checking whether sudo sends mail or not, just a string change.
Post reply on HN