Graphical root access on a hardened server
My shop uses RedHat 6.5 with Oracle and java. Recently, we've been hardening our servers, and have modified our systems to prevent root from remote login, whether ssh or VNC / Xwindows.
Having done so, we've found that we need to run graphical installers as root for configuration changes.
For example I'd like to use the utility system-config-users, and doing so, I get a message:
system-config-users requires a currently running X server
The message is misleading, it is a permissions issue.
If I run the command:
then I'm able to run my system-config utility
when finished, I run the command:
and that removes localhost from the access list.