LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Closed Thread
 
Search this Thread
Old 12-23-2013, 01:06 PM   #1
lordadamson
LQ Newbie
 
Registered: Nov 2013
Location: Egypt
Distribution: Fedora
Posts: 25

Rep: Reputation: Disabled
I was logged in as root without providing password


I installed slackware 14 on virtualbox just playing around and testing different distros.

I found that I have to issue startx command everytime I log in to get KDE started up.

so I went to /etc/rc.d/rc.local

I added a path to a script that only contain "startx".

I rebooted the VM to test if that will work. and it did work, but lo, behold! once the system started, KDE started and I was logged in as root without having to provide a password!

isn't that a loophole? or am I missing something?
 
Old 12-23-2013, 01:10 PM   #2
xp19375
LQ Newbie
 
Registered: Jan 2012
Distribution: Slackware 14.1
Posts: 16

Rep: Reputation: Disabled
[Deleted]

Last edited by xp19375; 12-23-2013 at 01:23 PM. Reason: Delete
 
Old 12-23-2013, 01:12 PM   #3
xp19375
LQ Newbie
 
Registered: Jan 2012
Distribution: Slackware 14.1
Posts: 16

Rep: Reputation: Disabled
I believe all of your init scripts (those in /etc/rc.d) are run as root, so putting "startx" in rc.local will run X as root.

The proper way to get X to start on boot is to edit your /etc/inittab, and set the default runlevel to 4 by changing
Code:
id:3:initdefault:
to
Code:
id:4:initdefault:
 
Old 12-23-2013, 01:55 PM   #4
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,470
Blog Entries: 6

Rep: Reputation: Disabled
http://docs.slackware.com/slackware:beginners_guide
 
Old 12-24-2013, 10:49 AM   #5
yars
Member
 
Registered: Apr 2012
Location: Russia
Distribution: Slackware
Posts: 125

Rep: Reputation: 11
This is interesting way to get root privileges Another way is to send to the kernel the parameter init=/bin/bash root=/dev/sda1 and then get root privileges without giving a password. If the malefactor have access to local machine, maybe only the encrypted partitions may help to save your data.
But for changing a content of rc.local needed root's privileges, and it's not a problem, and it is good.

Last edited by yars; 12-24-2013 at 10:54 AM.
 
Old 12-25-2013, 03:20 AM   #6
FeyFre
Member
 
Registered: Jun 2010
Location: Ukraine, Vinnitsa
Distribution: Slackware
Posts: 308

Rep: Reputation: 22
Quote:
f the malefactor have access to local machine
If malefactor has access to physical console this is absolutely separate branch of security facilities, and it has own methods to prevent such problem. Malefactor can extract storage devices, create hard copy, put them back, even to care about security seals. This is not in competention of software solutions.
 
Old 12-28-2013, 06:32 AM   #7
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,447
Blog Entries: 54

Rep: Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890Reputation: 2890
Please post your thread once and in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate of https://www.linuxquestions.org/quest...ox-4175488966/.
 
  


Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Logged in as root, prompted for root password ta0kira Slackware 13 04-25-2005 01:29 AM
kde much slower to start when logged in as alan than logged in as root arubin Slackware 0 04-26-2004 04:27 PM
changing root password (not logged in) rinux Linux - Security 10 05-22-2003 02:15 PM
mozilla works fine when logged in as a user but crashes when logged in as root jimi Linux - General 6 04-02-2003 08:34 PM
WuFTPD: Providing *remote* root since at least 1994 jeremy Linux - Security 2 07-26-2000 10:18 AM


All times are GMT -5. The time now is 07:05 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration