LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-12-2014, 09:11 PM   #1
cfamsler
LQ Newbie
 
Registered: Sep 2004
Posts: 3
Blog Entries: 5

Rep: Reputation: 0
Graphical root access on a hardened server


My shop uses RedHat 6.5 with Oracle and java. Recently, we've been hardening our servers, and have modified our systems to prevent root from remote login, whether ssh or VNC / Xwindows.
Having done so, we've found that we need to run graphical installers as root for configuration changes.

For example I'd like to use the utility system-config-users, and doing so, I get a message:

system-config-users requires a currently running X server

The message is misleading, it is a permissions issue.

If I run the command:
xhost localhost
then I'm able to run my system-config utility
when finished, I run the command:
xhost -localhost
and that removes localhost from the access list.
 
Old 05-13-2014, 01:52 PM   #2
suicidaleggroll
LQ Guru
 
Registered: Nov 2010
Location: Colorado
Distribution: OpenSUSE, CentOS
Posts: 5,260

Rep: Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948Reputation: 1948
Is there a question in there, or just a comment?
 
Old 05-13-2014, 02:03 PM   #3
smallpond
Senior Member
 
Registered: Feb 2011
Location: Massachusetts, USA
Distribution: CentOS 6 (pre-systemd)
Posts: 2,614

Rep: Reputation: 703Reputation: 703Reputation: 703Reputation: 703Reputation: 703Reputation: 703Reputation: 703
Security and running root in X-Windows are close to non-overlapping states. Use adduser to add users. If you want graphics, use an http-based manager like webmin running on an appropriately protected port.
 
  


Reply

Tags
root login, x server, xhost


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Automatically start graphical (SDL) program as root on non-graphical Debian the_merovingian Debian 1 03-03-2009 04:20 PM
hardened linux from scratch glibc build hardened-specs.sh problem behmjoe Linux From Scratch 2 09-04-2005 03:06 PM
Secure Linux Distro Hardened for Server Operation colline Linux - Security 3 05-13-2005 08:04 PM


All times are GMT -5. The time now is 01:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration