This week focused on implementing the Principle of Least Privilege. By creating a dedicated user for administration and restricting ‘root’ usage, we ensure that the system is more secure against accidental or unauthorized changes.
I performed the following terminal operations to configure the server’s user environment.
I created the zetzura account to serve as the primary system administrator.
sudo adduser zetzura
To allow the new user to run administrative tasks, I added them to the sudo group.
sudo usermod -aG sudo zetzuragroups zetzura
To reduce security risks, I removed the manager account that was used during the testing phase.
sudo deluser --remove-home manager
I performed a final check to ensure the user list and group permissions were correctly applied.
getent group sudo