LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-09-2007, 08:27 PM   #1
AphoxemaG
Member
 
Registered: Jan 2007
Location: Illinois
Distribution: Slackware 11
Posts: 37

Rep: Reputation: 15
The danger of the Root! As sung by Mealoaf.


Is there anything natively dangerous about being logged into root besides your cat stepping on the keyboard? What I've been doing is keeping root logged into TTY2 (ctrl-alt-2) for when I need it, and I've wondered if there's a risk that just that might compromise my newbish system.
 
Old 01-09-2007, 08:55 PM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by AphoxemaG
Is there anything natively dangerous about being logged into root besides your cat stepping on the keyboard? What I've been doing is keeping root logged into TTY2 (ctrl-alt-2) for when I need it, and I've wondered if there's a risk that just that might compromise my newbish system.
well, besides the cat thing, if there's someone else around they could do a ctrl-alt-2 and have root... but if you're the only one who uses your computer then it's not that big of a deal... the big problem is when you _use_ your computer as root for non-administrative tasks - having root logged-into a TTY is IMHO (physical access issues aside) no more dangerous than having some programs running with root privilages on your system (X.org, Cron, Sshd, etc.) - which is something normal on almost any linux desktop...

Last edited by win32sux; 01-09-2007 at 08:57 PM.
 
Old 01-09-2007, 09:20 PM   #3
AphoxemaG
Member
 
Registered: Jan 2007
Location: Illinois
Distribution: Slackware 11
Posts: 37

Original Poster
Rep: Reputation: 15
Oh, good, then I don't have anything to worry about. Right now I'm using it to control my wireless, which I have to mess with alot because the neighbor I'm borrowing it from is 500 ft away, and I have to reconnect often, and to mount or unmount the CD drive.
 
Old 01-09-2007, 11:03 PM   #4
mattydee
Member
 
Registered: Dec 2006
Location: Vancouver, BC
Distribution: Debian,Ubuntu,Slackware
Posts: 479

Rep: Reputation: 48
Quote:
Originally Posted by AphoxemaG
Oh, good, then I don't have anything to worry about. Right now I'm using it to control my wireless, which I have to mess with alot because the neighbor I'm borrowing it from is 500 ft away, and I have to reconnect often, and to mount or unmount the CD drive.
You don't need root to mount/umount the cdrom drive.
Just add "users" option to the cdrom line /etc/fstab.

Perhaps you should tell your neighbor to look into wpa2 encryption to make sure that only the two of you have access to his connection. He might be concerned about someone borrowing his internet connection in the same way you are concerned about someone borrowing your linux box as root...
you know, for good karma and all that...
 
Old 01-09-2007, 11:12 PM   #5
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
word... you also don't need root for the wireless stuff...

install something like NetworkManager and save some sanity...

Last edited by win32sux; 01-09-2007 at 11:16 PM.
 
Old 01-11-2007, 07:38 AM   #6
AphoxemaG
Member
 
Registered: Jan 2007
Location: Illinois
Distribution: Slackware 11
Posts: 37

Original Poster
Rep: Reputation: 15
He's got this idea stuck in his head that WEP is safer than WPA, even though I showed him the whole FBI thing. One of those big 'administrators' that don't administer much anything besides their home computer.

I just use dialup for secure stuff and the wireless for faster stuff. Honestly, I feel strangely more comfortable with someone on the other side of the world getting my private information than any kids around here with Airopeek and too much free time...

... wait...
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
113 danger ??? gabsik Linux - Security 1 07-20-2006 06:09 AM
This is sung kim from KOREA hyun68128 LinuxQuestions.org Member Intro 3 12-14-2005 12:10 PM
Danger, Danger, Danger. Dead Rat Killed My Slack vdemuth General 2 07-12-2004 03:54 PM
xhost + am I in danger? arpi Linux - Software 2 06-12-2004 09:38 PM
Danger newbie about Dailydesign Linux - Software 6 06-08-2003 06:24 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration