putting a password on sudo disabled the little PC. I got it back but would still like sudo to ask for a password. Can anyone tell me what scripts run when xandros boots? If I can find it, perhaps I can make that specific command passwordless only.

To change a password just type in the terminal:

(to change the root password)

or

(to change the user password)

the command for finding

http://wiki.eeeuser.com/howto:help_f...word_procedure

I'll try and be more specific: Currently on the eee PC, sudo does not ask for a password, which makes the PC vulnerable to attack in that viruses and rogue software have administrative access to the machine - which is a problem with most Windows setups, and one that I'd like to avoid. HOWEVER somewhere in the boot scripts of the eee PC, a sudo command is executed. If you set sudoers to "PASSWORD" then the PC boot stops - somewhere before you get the login screen. Can anyone help to identify the script that executes a sudo command when booting?

can you post your sudoers?

Also set sudo to use password and the system halts at some point, can you post your dmesg and messages and boot.log output?

dmesg:
and

messages:

boot.log:

this must show where it stalls.

from there you could figure out which part runs sudo (even tho its strange that something on boot will run sudo ? )

cheers

I got some of them. I couldn't find reference to sudo in them. thanks for looking into this. It strikes me as an irresponsible way to setup a machine -very microsoft.

they won't let me post the output here - too many chars. I'll look into how to do attachments.

I found that the file:
/usr/bin/startsimple
contains sudo'd commands, in particular:
sessreg, firstrunwizard, kill, rm,sh

is there a way to make this script run with root priviliges so I can un-sudo the commands and force the use of a password for sudo?

can you post the startsimple script here? and also did you find how it is started? which user/service starts it?

#!/bin/sh

sudo /usr/bin/sessreg -d -l :0.0 -u /var/run/utmp user
xhost + si:localuser:root # Allow local user root only to access the diplay

if ! [ -f /home/user/.firstrundone ]; then
sudo /usr/bin/sessreg -a -l :0.0 -u /var/run/utmp user
sudo /usr/bin/firstrunwizard
if [ $? -eq 0 ]; then
touch /home/user/.firstrundone
else
sudo /bin/kill -USR2 1
fi
elif [ -f /tmp/kdesession -a ! -f /home/user/.easysession ]; then
sudo /usr/bin/sessreg -a -l :0.0 -u /var/run/utmp user
if [ ! -d /home/user/Desktop ]; then
if [ -d /home/.Desktop ]; then
mv /home/user/.Desktop /home/user/Desktop
fi
fi
[ -f /usr/bin/dispwatch ] && /usr/bin/dispwatch &
for i in /sys/block/s[dr]?/uevent ; do
sudo /bin/sh -c "echo add > $i"
done
sudo rm -f /tmp/kdesession /tmp/nologin
exec startkde
else
sudo /usr/bin/sessreg -a -l :0.0 -u /var/run/utmp user
if [ -d /home/user/Desktop ]; then
if [ -d /home/user/.Desktop.bak ]; then
rm -rf /home/user/.Desktop.bak
fi
if [ -d /home/user/.Desktop ]; then
mv /home/user/.Desktop /home/user/.Desktop.bak
fi
mv /home/user/Desktop /home/user/.Desktop
fi
if [ -f /home/user/.easysession ]; then
# we are switching from full to easy mode
for i in /sys/block/s[dr]?/uevent ; do
sudo /bin/sh -c "echo add > $i"
done
fi
/opt/xandros/bin/AsusLauncher &
icewmtray &
[ -n "$XIM_PROGRAM" ] && $XIM_PROGRAM &
powermonitor &
minimixer &
networkmonitor ath0 eth0 &
wapmonitor &
(sleep 3; /usr/bin/keyboardstatus) &
(sleep 8; /opt/xandros/bin/start_netserv) &
(sleep 16; /usr/local/bin/asusosd) &
sudo rm /tmp/nologin
[ -f /usr/bin/dispwatch ] && /usr/bin/dispwatch &
exec icewm
fi
#################
I'm not sure how to identify the service that calls it...

If you are running the standard xandros EEE OS, and you have changed some configuration, and you are now having trouble un-changing it, do not forget the "Factory Restore" option:

Hold F9 during bootup.
Highlight "Restore Factory Settings"
Press enter.

Your EEE will be "as new", so if you have any important data on it, you need to back this up first.

My EEE701 is currently happily running ubuntu 10.04 (had to plug in an SD card to get enough memory though).

I hope you have found http://wiki.eeeuser.com

my guess is:
you could add your user to a group that is allowed to run only these programs that are ran in the script without password.

%my_sudo_custom_group ALL= NOPASSWD: /usr/bin/sessreg

or simply your user instead of %my_sudo_custom_group in case you have only one user on the system.

and add

my_user_with_sudo ALL=(ALL) ALL

this will give you only needed programs able to run with sudo no password and the rest with password.