The Idea of /usr/sbin Has Failed in Practice

Now, it has become routine to include /sbin and /usr/sbin in the PATH, and so we find ourselves having to su(do) thing, because we forget that it may look "runnable" and be found, but demands privilege to execute.

In days of yore when I started my journey, we didn't give ordinary logins these elements in PATH, and we believed in our UID/GID protection rings as well because sudo didn't exist. To be admitted to knowing the root password demanded you do the stonecutters walk of shame with the rock round your neck into the operations room at the end by the Dec-10. You also got the key to the cupboard where all the serial lines terminated, and access to a kettle and tin of bad instant coffee.