LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


View Poll Results: Should Slackware remove "sudo" package?
Yes! Kill it! 6 12.00%
No! OMG, Its my BFF! 34 68.00%
Move the sudo package to /extra 9 18.00%
Move the sudo package to Slackbuilds.org 1 2.00%
Voters: 50. You may not vote on this poll

Reply
  Search this Thread
Old 07-12-2014, 09:24 PM   #1
kingbeowulf
Senior Member
 
Registered: Oct 2003
Location: WA
Distribution: Slackware
Posts: 1,266
Blog Entries: 11

Rep: Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744
[Poll] Should 'sudo" be shifted from maninline to /extra or to Slackbuilds.org


Simple enough idea. Which Slackers use sudo on a regular basis? Occasionally? Is "sudo" even useful? I think that sudo is a security problem waiting to happen. Am I wrong? With Ubuntu and flavors killing "root" in favor of a wide open sudo configuration, should Slackware be a voice of reason and shun this abomination?

Why use

"sudo -i <command>"

when you can

"su -c <command> -"
 
Old 07-12-2014, 09:31 PM   #2
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: McKinney, Texas
Distribution: Slackware64 15.0
Posts: 3,858

Rep: Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225
Because with sudo, I don't need root's password.
 
3 members found this post helpful.
Old 07-12-2014, 09:33 PM   #3
kingbeowulf
Senior Member
 
Registered: Oct 2003
Location: WA
Distribution: Slackware
Posts: 1,266

Original Poster
Blog Entries: 11

Rep: Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744Reputation: 744
Egad! Only root should be allowed to do certain tasks. The horror! Not just some random user, even if that random user is just you.
 
1 members found this post helpful.
Old 07-12-2014, 09:37 PM   #4
Alien Bob
Slackware Contributor
 
Registered: Sep 2005
Location: Eindhoven, The Netherlands
Distribution: Slackware
Posts: 8,559

Rep: Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106
What a bollocks question. Wow.
 
13 members found this post helpful.
Old 07-12-2014, 09:37 PM   #5
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=15, FreeBSD_12{.0|.1}
Posts: 6,263
Blog Entries: 24

Rep: Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194Reputation: 4194
Sudo certainly has its place, and as ReaperX7 points out, because the user does not need root's password is a big reason!
G-r-a-n-u-l-a-r-i-t-y of access/control not otherwise available.

Sudo is a another useful tool which has its place, no need to burn it at the stake!

(No option that I thought applicable between OMG! and Kill it!, so BFF it is!)

Last edited by astrogeek; 07-13-2014 at 01:58 AM.
 
1 members found this post helpful.
Old 07-12-2014, 09:46 PM   #6
T3slider
Senior Member
 
Registered: Jul 2007
Distribution: Slackware64-14.1
Posts: 2,367

Rep: Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843
sudo has been around for decades. Just because Ubuntu abuses it doesn't mean it isn't an essential tool on nearly any *nix system. It may be OK to only allow root to run certain things on a single-user system where you can just su to root at will, but on a multi-user system you may want to allow users to run *some* commands as root without needing to give them the root password (only one person should ever have the root password to any system!). sudo lets you specify very explicitly which commands a user should run. If you remove sudo, you're stuck either never letting any non-root user do anything with elevated privileges (which is stupid -- even turning the computer off without ACPI requires root privileges, though fancy DMs/DEs use other means), or giving all of your users the root password (which is far stupider). And certainly there is a matter of convenience even on single-user systems -- I have certain commands defined that are in no way dangerous that require root access, and sudo allows me to run them without needing to su to root or provide a password. Additionally, since setuid doesn't work for scripts, sudo is the only way to run scripts with elevated privileges should the need arise.

I don't understand how anyone actually familiar with sudo would think it should be excluded or marginalized...again, just because Ubuntu uses it wrong doesn't mean it can't be used right.
 
4 members found this post helpful.
Old 07-12-2014, 09:53 PM   #7
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141
Sudo is hardly my BFF, despite the rather prejudicial wording of the question in the poll, but I see nothing to be gained and much to be lost by removing it from a standard Slackware install. Used properly, it is a valuable tool.

Sure, Ubuntu's skeevy sudo fetish is annoying and a bit creepy, but don't take it out on Slackware.
 
3 members found this post helpful.
Old 07-12-2014, 09:56 PM   #8
Arkerless
Member
 
Registered: Mar 2006
Distribution: Give me Slack or give me death.
Posts: 81

Rep: Reputation: 60
Quote:
Originally Posted by T3slider View Post
sudo lets you specify very explicitly which commands a user should run. If you remove sudo, you're stuck either never letting any non-root user do anything with elevated privileges (which is stupid -- even turning the computer off without ACPI requires root privileges, though fancy DMs/DEs use other means), or giving all of your users the root password (which is far stupider).
This really makes it sound like a broken security model at core, and point to needing more than a sudo bandaid. For instance, turning off the computer is an effective DoS against all other users, so it makes absolute sense that it needs roots approval. But on a typical PC there is unlikely to be another user logged in to object. So what you really want to see when an unprivileged user requests a shutdown is a quick check for other active sessions or policies preventing it. If there are none, proceed to shutdown. If there are... well that would be where defining proper behavior gets more difficult.

That said, it's probably stupid to tear off the bandaid until after you have a real fix.

Quote:
I don't understand how anyone actually familiar with sudo would think it should be excluded or marginalized...again, just because Ubuntu uses it wrong doesn't mean it can't be used right.
But because it's a crutch that every Ubuntu user is drilled to rely on, and Ubuntu is most popular hence what new users are most likely to be familiar with, we can expect to see more and more confusion about how to use it in Slack.

P.S. Voting move to extra because I think 90% of the distro should be there anyway.

Last edited by Arkerless; 07-12-2014 at 09:58 PM.
 
1 members found this post helpful.
Old 07-12-2014, 10:06 PM   #9
MadMaverick9
Member
 
Registered: Aug 2010
Posts: 353
Blog Entries: 4

Rep: Reputation: Disabled
Quote:
Originally Posted by Alien Bob View Post
What a bollocks question. Wow.
Couldn't agree more.

And if sudo bothers you that much, just do:
Code:
removepkg sudo
For crying out loud!
 
Old 07-12-2014, 10:40 PM   #10
schmatzler
Member
 
Registered: Jan 2011
Location: Germany
Distribution: Slackware64 -current + Multilib
Posts: 411

Rep: Reputation: 181Reputation: 181
I think I've never used sudo in my entire life.

Because of that my opinion is clear: Leave it where it is.
 
Old 07-12-2014, 10:46 PM   #11
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-15.0
Posts: 11,057

Rep: Reputation: Disabled
Who's your system's administrator? You, or Patrick J. Volkerding?

Furthermore some commands are a lot more dangerous than sudo and still can be used by a regular user. dd comes to mind.
 
Old 07-13-2014, 01:48 AM   #12
mlangdn
Senior Member
 
Registered: Mar 2005
Location: Kentucky
Distribution: Slackware64-current
Posts: 1,845

Rep: Reputation: 452Reputation: 452Reputation: 452Reputation: 452Reputation: 452
I'm another that has never used sudo. That said, I'll have to read up on sudo first to see what it actually can do. I don't su to root on any kind of a regular basis, so I don't even know if I could use it.
 
Old 07-13-2014, 03:31 AM   #13
Mark Pettit
Member
 
Registered: Dec 2008
Location: Cape Town, South Africa
Distribution: Slackware 15.0
Posts: 619

Rep: Reputation: 299Reputation: 299Reputation: 299
"sudo" is what allows our systems to pass auditors examinations. Sometimes, because of Unix/Linux architectural decisions, you just need the granularity that it provides. On a server, mounting a device (usb/cd etc) is only possible by root - but often it really has nothing to do with the root user - just an app needing to save/fetch some data. Leave it alone.
 
Old 07-13-2014, 04:04 AM   #14
dugan
LQ Guru
 
Registered: Nov 2003
Location: Canada
Distribution: distro hopper
Posts: 11,223

Rep: Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320
Sudo is included with Slackware and not enabled by default. I think that's perfect.
 
5 members found this post helpful.
Old 07-13-2014, 04:05 AM   #15
Randicus Draco Albus
Senior Member
 
Registered: May 2011
Location: Hiding somewhere on planet Earth.
Distribution: No distribution. OpenBSD operating system
Posts: 1,711
Blog Entries: 8

Rep: Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635
Quote:
Originally Posted by kingbeowulf View Post
With Ubuntu and flavors killing "root" in favor of a wide open sudo configuration, should Slackware be a voice of reason and shun this abomination?
1) How would moving the location of the sudoers file prevent Buntards from configuring Slackware to mimic Buntu's retarded system of sudo abuse?
2) Trying to hide sudo from users would follow the same line of hand-holding reasoning used by Comical, just hiding sudo instead of hiding root. If the desire is to prevent Buntu-style sudo abuse, a better idea is to do what Comical does not; educate new users. As can be seen from several respondents in this thread, Slackware users' level of knowledge appears "slightly" higher than that of sudo-abusing distros. So I doubt they need their hands held.
 
  


Reply

Tags
slackware, software installation, sudo



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
openbox on slack13.37 (x86) -- Thanks to linuxquestions.org, slackbuilds.org & many vectrum Linux - Member Desktop Screenshots 5 02-03-2013 12:22 PM
[SOLVED] "sudo: Can't mkdir /var/run/sudo/%user%: File exists" CNBarnes Linux - Server 7 01-10-2011 04:11 PM
Switching "nv" to "nvidia" = screen shifted to the left? mpriddy Linux - General 5 02-28-2007 10:38 PM
Use SlackBuilds.org or my own hosting to offer up SlackBuilds? hollywoodb Slackware 6 11-30-2006 08:56 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 05:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration