Birmingham mumbai

[
 69 
]
Of course, there is much more to 
sudo
 than what I've mentioned in this section. 
Entire books could be written about 
sudo
 (and have been), but 99% of what you will 
need for your daily management of this tool involves how to add access to users 
while being specific about what each user is able to do. As a best practice, use groups 
when you can (for example, you could have an 
apt
 group, a 
reboot
 group, and so 
on) and be as specific as you can
 regarding who is able to do what. This way, you're 
not only able to keep the 
root
 account private (or even better, disabled), but you also 
have more accountability on your servers.
Now that we've explored granting access to 
sudo
, we will next take a look at 
permissions, which give us even more control over what our users are able to access.