Why root’s password change doesn’t require old password

passwdrootSecurity

Why can root's password can be changed without entering the old password? Is there any benefit to this or is it just an implementation fault? If we issue passwd from a normal user account it first asks for " (Current) Unix Password: " but in the case of root it takes us directly to " Enter new Unix password: ". I don't understand the logic behind this.

Best Answer

Root owns and can write to both /etc/passwd and /etc/shadow anyway. Which does not mean the sysadmin SHOULD know her user's passwords. In fact, she should not know anything else than the root password.

Related Question