Speaking of security - I don't understand why it is such a big deal. Yes, I do like the idea of limiting what less knowledgeable users can see and do.
Maybe I can enlighten you. This response is not meant as flame so I hope that it does not
get interpreted as such.
Your thoughts on security, at least my interpretation is that you believe the problem to be
other users looking at others files and such. Security in the basis of a Unix or Unix type
environment are to seperate the user from the system. The reason is far more than just
be able to see others files. Any time a system setting in changed it can affect alot of people.
If you were to just enable bind and then change a setting or two you can affect hundreds to
thousands since bind if configured wrong can affect other DNS servers. Too many approach
security with the same thoughts, " Why would anyone care about my files?" It is the very
computer resources that are wanted very rarely the files. This is part of what has created
all of the bot networks. If I can control 300 machines each to send 30 emails as spam who
would notice, besides the receivers?
I agree that having to use su can be a pain and takes longer. Maybe you can think of it as
one small step to staying out of a bot net.
As far as GUI vs Cli. I do most of my configuration from Cli it is almost always more powerful
than almost any GUI I have come across. All of my troubleshooting starts at Cli since I can get
error messages that seem to forgotten in the GUI environment. There is alot to remember for
switches, even I only recall the frequently used ones. Man seemed cryptic, which I have learned
to conquer. Cli and switches for the average user may be over kill I agree. There needs to be a
balance. The failure that I see in GUI is the lack of logging and error messages.
When I moved completely to Linux type systems the most awe inspiring thing was the logging
system. It was intimidating but the troubleshooting got easier. Being that I am an administrator
it is can be difficult to see the other side. It is knowing that and listening to what my users want,
not what I decide is the way to do things. That creates the perfect solution for all of those involved.
Too many administrators deny any input from users, that is a mistake.
Bigpaws