LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-16-2010, 10:55 PM   #1
Alnitak
LQ Newbie
 
Registered: Sep 2010
Location: Cairo
Distribution: Ubuntu 10.04LTS
Posts: 6

Rep: Reputation: 0
Cool My first question, "Why does Iplist/Ipblock need a password?


Just as the title says. Why am I required to input my user password to launch this program?
I am using 10.04 Ubuntu and this requirement does kind of annoy me.

I like making a second account that can admin the system, and my main account has the admin option disabled in the 'Users & Groups'. I read it's secure to do this, but I see other downsides.

Firestarter too requires a password to load it's GUI.

Is there any work around because I don't like leaving admin privileges enabled especially when I'm not at the computer.

Thanks in advance
 
Old 09-17-2010, 12:37 AM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 356Reputation: 356Reputation: 356Reputation: 356
Essentially anything that involves reading or modifying system files or parameters requires higher permissions than the user account. It was really only recently that users could mount devices without entering in a password.

Giving your password to run those programs through sudo is however perfectly safe and the excepted method. Granting single programs like Firestarter root-level permissions do not effect the permissions of any of the other running programs.
 
Old 09-17-2010, 12:40 AM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,240

Rep: Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324Reputation: 2324
Quote:
excepted
A Freudian slip methinks
I would have used 'accepted', but maybe the American dictionary is different... Ok, so it's Friday arvo here
 
Old 09-17-2010, 01:51 AM   #4
Alnitak
LQ Newbie
 
Registered: Sep 2010
Location: Cairo
Distribution: Ubuntu 10.04LTS
Posts: 6

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by MS3FGX View Post
Essentially anything that involves reading or modifying system files or parameters requires higher permissions than the user account. It was really only recently that users could mount devices without entering in a password.

Giving your password to run those programs through sudo is however perfectly safe and the excepted method. Granting single programs like Firestarter root-level permissions do not effect the permissions of any of the other running programs.
So is it possible to load Iplist / Firestarter without a password so I don't need admin privileges?

I usually proxy and packet filter, as some files can take a while. So having my computer with admin enabled for long periods is my main concern. I'm in desire of a possible work around user side to run them without having to switch back and forth between my fake root / second account to enable, and my main without the elevated privileges.

I don't see why Iplist requires a sudo password considering it is just packet filtering, or is there some higher elevated area to it I'm unaware? Such as it mandatory to have root-level for it?

I guess my view is, having a packet filter running for days to weeks with admin enabled is a security issue. That's my main concern.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unique password for "update" and "synaptic" and "apt-get" SaintDanBert Linux - Security 1 09-17-2010 05:53 AM
ipblock in opensuse 11 threatingbehaviour Linux - Newbie 0 06-02-2009 03:51 AM
ipblock seems to be malfunctioning DarkPlexus Linux - Software 1 02-18-2008 09:35 AM
ipblock default behavior FolkTheory Linux - Security 3 12-01-2007 01:30 PM
iplist for amule devil28 Linux - Software 0 07-07-2005 11:58 AM


All times are GMT -5. The time now is 02:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration