LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-03-2004, 12:28 AM   #1
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Rep: Reputation: 30
I want full access


A couple of questions -
1} I created a user account and I'm getting fed up of constant messages saying access is restricted all the time and I just want to know if there's an easy way I can allow access for everything but anything that should be root only asks for a password instead of just saying restricted so I have to start setting permissions etc.

2} If the above is not possible I would just rather login as root all the time and block access to my my XP drive to everyone, including root. How would I do that? I have set it as forbidden but I am still able browse and copy to and from my XP drive.
 
Old 12-03-2004, 01:53 AM   #2
salparadise
Senior Member
 
Registered: Nov 2002
Location: Birmingham UK
Distribution: Various
Posts: 1,736

Rep: Reputation: 146Reputation: 146
This is a BAD idea!
Get used to user permissions and inputting passwords as you will severely compromise your Linux box if you run as root all the time. This is partly why Windows sucks so much. It's not just that you might accidentally mess up a system file, it's that when you run as root, every program you start is running with root access as well. So any malicious code in a webpage or malformed code will run on your system with the same priveleges as root.
Potential cyber-suicide.
The closest you'll get is to set up a sudo account (allowing you to perform otherwise sysadmin type tasks as an ordiary user - though you will still have to put your password in.)

Linux doesn't mess about when it comes to security.
 
Old 12-03-2004, 02:03 AM   #3
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
The sudo account sounds pretty much like what I'm looking for. I'll get googling for more info.
Does anyone know where I can find more info about sudo?
 
Old 12-03-2004, 02:10 AM   #4
salparadise
Senior Member
 
Registered: Nov 2002
Location: Birmingham UK
Distribution: Various
Posts: 1,736

Rep: Reputation: 146Reputation: 146
man sudo

man is your friend

(short for manual)

see also:

info sudo

apropos sudo

q to quit from terminal display of man/info file

Last edited by salparadise; 12-03-2004 at 02:11 AM.
 
Old 12-03-2004, 10:02 AM   #5
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Aah, very useful. Thankx
 
Old 12-04-2004, 05:21 PM   #6
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
As it turns out, not so useful. The problem is, I was using the user account I setup when I installed Kanotix to disk and everything was fine. I was installing programs to the home directory and it was becoming very cluttered so I decided to delete the account and start again by creating a new account and this was the start of my problems.
I have read what I can about setting permissions and but nothing seems to work. I eventually got kppp to run but I had to input all my dial-up details again and after faffing around for about an hour I still can't get the modem to start, it says initialising but nothing happens. On top of this I'm getting no sound at all and I'm having loads of other problems. I've added myself to all the groups that should get things working but I'm still getting nowhere.
Can anyone point me to a good knowledge base so I get hardware working as a user because it's becoming a major pain in the arse now.
 
Old 12-05-2004, 06:47 AM   #7
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Right so I started getting the hang of it and got most things working (not modem, though) but somehow, when I thought I deleted my modem folder, I found after booting up I had actually deleted my etc folder!! How is this possible? I thought the whole point of running as a user was to stop you doing stupid, idiotic things like deleting one of the most important directories.
And to make things worse, half an hour before that I wiped out my backup partition to make some room for a /home partition (ok, so I should have copied all my backups to my other drive BEFORE deleting the partition) so I can't even restore the etc directory, I don't know whether to laugh or cry.
 
Old 12-05-2004, 04:36 PM   #8
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Consider this a lesson learned and get out the install disks. This is exactly why running as root and making too much use of sudo is a very bad thing to do...

the only way a normal user could have deleted /etc is if someone hosed up the permissions on it ... as root
 
Old 12-05-2004, 05:20 PM   #9
mrcheeks
Senior Member
 
Registered: Mar 2004
Location: far enough
Distribution: OS X 10.6.7
Posts: 1,690

Rep: Reputation: 52
one day i was asked by a user to
- to create a user with root acccess
- to change a root username to something else

- The user didn't want to bother with putting his password. i asked him if he wanted to get hacked or if he has been hacked one day and had known about it.

- i said it wouldn't change nothing , you can get the user uid with a simple command. hackers look for uid 0 not root. i didn't bother detailing right access, root privileges and the rest.

root user is for maintenance stuff, configuration and that's it.
If you are too tired someday and logged as root you can also enter a simple command such as:
Code:
rm -rf /*
 
Old 12-05-2004, 08:26 PM   #10
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
I've re-installed and I'm starting the process of apt-getting what I lost (though it wasn't that much really), with the Kanotix made user account I'm getting the hang of it again and am only using root when I need to.
There's still a couple of problems though -
Firstly, I still can't get any sound when using the user account.
Secondly, after re-installing my modem driver and setting up Guarddog I could connect to the internet fine using the user account but now when I started up the computer I can't get it to connect - kppp is saying unable to open modem and I can't find a way to get it to start up.
 
Old 12-05-2004, 08:43 PM   #11
mrcheeks
Senior Member
 
Registered: Mar 2004
Location: far enough
Distribution: OS X 10.6.7
Posts: 1,690

Rep: Reputation: 52
This my help :

1- add the user to the audio group
man useradd if you don't know how to do it.

2- Try to setup a startup script for you connection. There is a script called pppoeconf i think.
 
Old 12-05-2004, 08:55 PM   #12
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
1. The user is in the audio group
2. There is already a startup script for the modem

Thanks for the suggestions though.

I've just tried rebooting and logged in as root and sound internet connection were working normally, I then rebooted again and logged in as user and no sound, no connection.
 
Old 12-05-2004, 09:10 PM   #13
mrcheeks
Senior Member
 
Registered: Mar 2004
Location: far enough
Distribution: OS X 10.6.7
Posts: 1,690

Rep: Reputation: 52
try
chmod g+rw /dev/dsp* /dev/mixer*

for your connection check if it is already activated at boot, not when a user is logged in. If root can surf the web why wouldn't a regular user not be able to do so.
- alt+FX to go to a console.
- login.
- ping google.ca
- check if kppp isn't launch when the gui start. it would be unecessary since there is an init script for that...
 
Old 12-05-2004, 10:29 PM   #14
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Well that got my sound working... until next time I logged in, then no sound again.
I also noticed something else, I messed around with the desktop a bit and added some items to the kicker and a couple of applets and after restarting they were gone. Also, I tried running Firefox and Thunderbird and neither would allow me to create profiles, I got a message saying I don't have write access to my own home folder. And I'm still getting nowhere with the modem.
This is driving me potty.
 
Old 12-05-2004, 11:54 PM   #15
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Flippin 'eck. Does everyone really exclusively log in as a user? It just seems so much hassle and every simple thing becomes a huge chore. I'm sure it makes Linux very secure but really.
It's all very well trying to stop anyone else getting access to the computer but I would actually like to access things myself.
I'm starting to think I'm missing something simple here, I logged in as a user in Knoppix, which I have installed on another partition and I'm getting identical problems, the same things aren't working - no sound, no modem, no write access to my home directory but again, everything is working fine as root.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Full access directory for all users mmowchenko Linux - Newbie 4 11-04-2005 07:15 AM
How to have Full root access at logon omeryasin Linux - General 3 10-29-2005 03:58 AM
Full write access to vfat Rªdical_£D SUSE / openSUSE 2 03-18-2005 03:15 AM
Release full access to NT user ust Linux - Software 0 10-05-2004 08:13 PM
Full FTP Access - Oh No Lucasite Linux - Security 2 03-12-2004 11:27 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:59 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration