Please understand that I've migrated to a Ubuntu Desktop from Win7 some months ago and while I have been reading about sudoers and Linux in general my understanding is still limited.
This is how I have my Users setup:
A standard user (not in the sudoers) which I log into and use for all daily operations, running all my programs, browsing, designing, mailing, etc.
An administrator user which I only switch into using the terminal by means of "su [user]" whenever I need to do something that requires privileges. (just so I can "sudo" a command that requires it - basically doing what needs to be done and then switching back to the standard user)
My question is: Is this a good security practice or does it make no sense at all to have it set up like this? From what I can tell so far I don't seem to need administrator privileges that often anyway.
The reason I'm asking is that I've only recently learned that there is a difference between the root account and my administrator account :). I'm still partially confused about it but from what I can gather you "tap" into the root account using something like "sudo" in the terminal while being logged in as a user that is in the sudoers (an administrator). The strangeness of it is that in order to "sudo" something I basically enter the same password my administrator account has. Doesn't this mean that if my administrator account is compromised then so is the root account? I'm all too terribly confused by this :(.