LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu
User Name
Password
Ubuntu This forum is for the discussion of Ubuntu Linux.

Notices


Reply
  Search this Thread
Old 07-03-2008, 11:33 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Rep: Reputation: 60
Ubuntu/Hardy Root File access


I am using Ubuntu/Hardy and have been trying to modify certain files with root access and "su -". When ever I even try to create a file I get this message

PHP Code:
root@Zithius:~# touch test
touchcannot touch `test': Read-only file system 
I am assuming this is selinux security. How in the heck can I disable this so that I can modify what I need?
 
Old 07-04-2008, 02:31 AM   #2
Libra RHR
Member
 
Registered: Aug 2003
Location: Salzburg, Austria
Distribution: Ubuntu 8.04
Posts: 46

Rep: Reputation: 15
If you may post the output of

mount

I might be able to help you.
 
Old 07-04-2008, 10:14 AM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
PHP Code:
root@Zithius:~# mount
/dev/sda5 on type ext3 (rw,relatime,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev)
/
sys on /sys type sysfs (rw,noexec,nosuid,nodev)
varrun on /var/run type tmpfs (rw,noexec,nosuid,nodev,mode=0755)
varlock on /var/lock type tmpfs (rw,noexec,nosuid,nodev,mode=1777)
udev on /dev type tmpfs (rw,mode=0755)
devshm on /dev/shm type tmpfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
lrm on /lib/modules/2.6.24-19-generic/volatile type tmpfs (rw)
/
dev/sda1 on /boot type ext3 (rw,relatime)
/
dev/sda8 on /home type ext3 (rw,relatime)
/
dev/sda9 on /tmp type ext3 (rw,relatime)
/
dev/sda6 on /usr type ext3 (rw,relatime)
/
dev/sda7 on /var type ext3 (rw,relatime)
securityfs on /sys/kernel/security type securityfs (rw)
gvfs-fuse-daemon on /home/dabeast/.gvfs type fuse.gvfs-fuse-daemon (rw,nosuid,nodev,user=daman
 
Old 07-04-2008, 11:46 AM   #4
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
I figured it out. UBUNTU and other Distros like Mandriva are using the SUDO type of security and not the traditional root access. Here are some benefits of using SUDO:

The benefits of leaving root logins disabled by default include the following:

* The installer has to ask fewer questions.
* Users don't have to remember an extra password (i.e. the root password), which they are likely to forget.
* It avoids the "I can do anything" interactive login by default (e.g. the tendency by users to login as an "Administrator" user in Microsoft Windows systems), you will be prompted for a password before major changes can happen, which should make you think about the consequences of what you are doing.
* Sudo adds a log entry of the command(s) run (In /var/log/auth.log). If you mess up, you can always go back and see what commands were run. It is also nice for auditing.
* Every cracker trying to brute-force their way into your box will know it has an account named root and will try that first. What they don't know is what the usernames of your other users are. Since the root account password is locked, this attack becomes essentially meaningless, since there is no password to crack or guess in the first place.
* Allows easy transfer for admin rights, in a short term or long term period, by adding and removing users from groups, while not compromising the root account.
* sudo can be setup with a much more fine-grained security policy.
* The authentication automatically expires after a short time (which can be set to as little as desired or 0); so if you walk away from the terminal after running commands as root using sudo, you will not be leaving a root terminal open indefinitely.

Check out this link:

https://help.ubuntu.com/community/RootSudo

Any extra input would be appriciated.

Last edited by metallica1973; 07-04-2008 at 11:48 AM.
 
Old 07-04-2008, 03:56 PM   #5
jay73
LQ Guru
 
Registered: Nov 2006
Location: Belgium
Distribution: Ubuntu 11.04, Debian testing
Posts: 5,019

Rep: Reputation: 133Reputation: 133
Well, there is nothing that prevents setting up a root account on Ubuntu (sudo passwd) just as there is nothing that prevents setting up sudo on other distros (su - and then visudo). Personally, I prefer sudo and I am using it on Fedora etc. as well. Even if it weren't any safer, it would still feel more flexible and intuitive.

Since you were not already familiar with sudo, I assume that you haven't heard of things like gksu or gksudo either. Both should be preferred whenever the user needs to launch a graphical rather than a CLI application (e.g. gksudo gedit) - although there appears to be less of a need to make the distinction today. Sudo could have some unexpected side-effects but it's been a while since I heard anyone complain about that.

There are other ways to create files that require administrator permissions, though. If you use a GUI, you could use a combination of nautilus-terminal and nautilus-gksu.
 
Old 07-04-2008, 04:15 PM   #6
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
thanks for the input
 
Old 07-05-2008, 01:02 AM   #7
Libra RHR
Member
 
Registered: Aug 2003
Location: Salzburg, Austria
Distribution: Ubuntu 8.04
Posts: 46

Rep: Reputation: 15
Aha, this is also an interesting news. I use Kubuntu, but since I am so used to have a log-in-able root, I did this by just making a password for root. So I am not used to a message "read only fs" on a rw fs.

cheers
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Installing Xen On An Ubuntu 8.04 (Hardy Heron) Server From The Ubuntu Repositor LXer Syndicated Linux News 0 05-08-2008 02:10 PM
LXer: Upgrade Ubuntu 7.10 (Gutsy Gibbon) to Ubuntu 8.04 LTS (Hardy Heron) Beta LXer Syndicated Linux News 0 03-26-2008 07:30 PM
Gaining root access to file manager Rick069 Linux - Software 2 04-27-2007 10:24 PM
root access on ubuntu/kubuntu? nightwalker1977 Linux - Software 5 11-17-2006 11:48 PM
log file access for 2nd root overlord73 Linux - Security 3 02-14-2006 07:30 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu

All times are GMT -5. The time now is 07:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration