I guess you wonder why it is great. Ans. Because it reduces errors as long as user does not concurrently use the web. Root passwords are confidential.
imagine in command mode doing a rm *~ and the user sneezes or his hand shakes and it ends up with rm * ~
Its very hard to do big damage with GUI, and it is much easier to avoid mistakes.
Naturally, the regular user can be added to group root, which is not really blockable via pam.
In conclusion, you don't give a five year old the keys to the car and tell him to drive. By the same token, you control who has root access in GUI mode.
Sudo is another open door. Every distribution I have used allows sudo su



Reply With Quote
