Register a domain and help support LQ
Go Back > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Slackware This Forum is for the discussion of Slackware Linux.


Closed Thread
  Search this Thread
Old 12-23-2013, 01:06 PM   #1
Registered: Nov 2013
Location: Egypt
Distribution: Fedora
Posts: 32

Rep: Reputation: Disabled
I was logged in as root without providing password

I installed slackware 14 on virtualbox just playing around and testing different distros.

I found that I have to issue startx command everytime I log in to get KDE started up.

so I went to /etc/rc.d/rc.local

I added a path to a script that only contain "startx".

I rebooted the VM to test if that will work. and it did work, but lo, behold! once the system started, KDE started and I was logged in as root without having to provide a password!

isn't that a loophole? or am I missing something?
Old 12-23-2013, 01:10 PM   #2
LQ Newbie
Registered: Jan 2012
Distribution: Slackware 14.1
Posts: 16

Rep: Reputation: Disabled

Last edited by xp19375; 12-23-2013 at 01:23 PM. Reason: Delete
Old 12-23-2013, 01:12 PM   #3
LQ Newbie
Registered: Jan 2012
Distribution: Slackware 14.1
Posts: 16

Rep: Reputation: Disabled
I believe all of your init scripts (those in /etc/rc.d) are run as root, so putting "startx" in rc.local will run X as root.

The proper way to get X to start on boot is to edit your /etc/inittab, and set the default runlevel to 4 by changing
Old 12-23-2013, 01:55 PM   #4
Senior Member
Registered: Jan 2011
Location: Yawnstown, Ohio
Distribution: This is my kung.fu
Posts: 4,284
Blog Entries: 2

Rep: Reputation: Disabled
Old 12-24-2013, 10:49 AM   #5
Registered: Apr 2012
Location: Russia
Distribution: Slackware
Posts: 150

Rep: Reputation: 14
This is interesting way to get root privileges Another way is to send to the kernel the parameter init=/bin/bash root=/dev/sda1 and then get root privileges without giving a password. If the malefactor have access to local machine, maybe only the encrypted partitions may help to save your data.
But for changing a content of rc.local needed root's privileges, and it's not a problem, and it is good.

Last edited by yars; 12-24-2013 at 10:54 AM.
Old 12-25-2013, 03:20 AM   #6
Registered: Jun 2010
Location: Ukraine, Vinnitsa
Distribution: Slackware
Posts: 321

Rep: Reputation: 22
f the malefactor have access to local machine
If malefactor has access to physical console this is absolutely separate branch of security facilities, and it has own methods to prevent such problem. Malefactor can extract storage devices, create hard copy, put them back, even to care about security seals. This is not in competention of software solutions.
Old 12-28-2013, 06:32 AM   #7
Registered: May 2001
Posts: 28,607
Blog Entries: 55

Rep: Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290Reputation: 3290
Please post your thread once and in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate of

Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Logged in as root, prompted for root password ta0kira Slackware 13 04-25-2005 01:29 AM
kde much slower to start when logged in as alan than logged in as root arubin Slackware 0 04-26-2004 04:27 PM
changing root password (not logged in) rinux Linux - Security 10 05-22-2003 02:15 PM
mozilla works fine when logged in as a user but crashes when logged in as root jimi Linux - General 6 04-02-2003 08:34 PM
WuFTPD: Providing *remote* root since at least 1994 jeremy Linux - Security 2 07-26-2000 10:18 AM

All times are GMT -5. The time now is 01:45 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration