LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 03-16-2004, 04:14 PM   #1
me99
Member
 
Registered: Mar 2004
Location: Littleton, CO
Posts: 92
Blog Entries: 1

Rep: Reputation: 15
Cool usr v.s. admin auto file permissions


If I allow a user from standard file  to have "adm, root, sys, and etc." access, does that automatically allow for editing root file?
Thanks.
 
Old 03-18-2004, 05:01 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,019
Blog Entries: 54

Rep: Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766
For my understanding, could you explain a wee bit clearer what you're trying to accomplish? Maybe add an example?
 
Old 03-19-2004, 01:38 AM   #3
me99
Member
 
Registered: Mar 2004
Location: Littleton, CO
Posts: 92
Blog Entries: 1

Original Poster
Rep: Reputation: 15
Talking

Well, I manually edited the user file where added myself as adm, sys, root, wheel, and etc. since I couldnít get it via the GUI. So, even I got the privileges of root, sys, and adm I still have to log in as su to update or modify any of the system files.
I would be expecting that with such privileges I would be able to modify system files but it seems like I still have to log in as su!?
Thanks.
 
Old 03-19-2004, 11:55 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,019
Blog Entries: 54

Rep: Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766Reputation: 2766
Well, I manually edited the user file where added myself as adm, sys, root, wheel, and etc.
What file?


So, even I got the privileges of root, sys, and adm I still have to log in as su to update or modify any of the system files. I would be expecting that with such privileges I would be able to modify system files but it seems like I still have to log in as su!?
With all due respect, but you're using the wrong approach. Granting any other lesser-privileged user root, sys or adm power is dead wrong, accounts under *nix are much more than just names.
What you should do is set up sudo and an unprivileged user account. Visudo (configure) what tasks an unprivileged user may perform as a more powerful user, log in to that unprivileged account and use that. Trying to do stuff with root privileges all of the time is something you should avoid at all costs.
 
Old 03-19-2004, 12:12 PM   #5
me99
Member
 
Registered: Mar 2004
Location: Littleton, CO
Posts: 92
Blog Entries: 1

Original Poster
Rep: Reputation: 15
Well unSpawn,
As a power user should not I have the privilege to access any file without too much hassle of constant su login/unlogin to modify files when developing?
To me, admin/password is for the last resort when you use it only to fix the problems that you by mistake crated with the privilege of administrate access. Itís like a back door that you donít use unless Ö .
Similar to windows access, again, that is a point from a power user!? It Linux more restricted in this then windows?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
/usr/ permissions all screwed up! ptafflogic Linux - Security 4 10-31-2004 03:28 PM
Apache DocumentRoot and Admin Group permissions Niels@debian Linux - Software 0 10-27-2004 12:34 AM
Mdk 10.0 permissions for /usr rifffrafff Mandriva 3 07-21-2004 09:47 AM
/usr/bin file permissions enlight1 Linux - Newbie 2 07-31-2003 08:16 PM
auto: auto file not found error rissi_kapoor Linux - General 0 08-15-2001 08:34 PM


All times are GMT -5. The time now is 07:56 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration