The danger of the Root! As sung by Mealoaf.

AphoxemaG · 01-09-2007, 08:27 PM

Is there anything natively dangerous about being logged into root besides your cat stepping on the keyboard? What I've been doing is keeping root logged into TTY2 (ctrl-alt-2) for when I need it, and I've wondered if there's a risk that just that might compromise my newbish system.

win32sux · 01-09-2007, 08:55 PM

Quote:

Originally Posted by AphoxemaG

Is there anything natively dangerous about being logged into root besides your cat stepping on the keyboard? What I've been doing is keeping root logged into TTY2 (ctrl-alt-2) for when I need it, and I've wondered if there's a risk that just that might compromise my newbish system.

well, besides the cat thing, if there's someone else around they could do a ctrl-alt-2 and have root... but if you're the only one who uses your computer then it's not that big of a deal... the big problem is when you _use_ your computer as root for non-administrative tasks - having root logged-into a TTY is IMHO (physical access issues aside) no more dangerous than having some programs running with root privilages on your system (X.org, Cron, Sshd, etc.) - which is something normal on almost any linux desktop...

AphoxemaG · 01-09-2007, 09:20 PM

Oh, good, then I don't have anything to worry about. Right now I'm using it to control my wireless, which I have to mess with alot because the neighbor I'm borrowing it from is 500 ft away, and I have to reconnect often, and to mount or unmount the CD drive.

mattydee · 01-09-2007, 11:03 PM

Quote:

Originally Posted by AphoxemaG

Oh, good, then I don't have anything to worry about. Right now I'm using it to control my wireless, which I have to mess with alot because the neighbor I'm borrowing it from is 500 ft away, and I have to reconnect often, and to mount or unmount the CD drive.

You don't need root to mount/umount the cdrom drive.
Just add "users" option to the cdrom line /etc/fstab.

Perhaps you should tell your neighbor to look into wpa2 encryption to make sure that only the two of you have access to his connection. He might be concerned about someone borrowing his internet connection in the same way you are concerned about someone borrowing your linux box as root...
you know, for good karma and all that...

win32sux · 01-09-2007, 11:12 PM

word... you also don't need root for the wireless stuff...

install something like NetworkManager and save some sanity...

AphoxemaG · 01-11-2007, 07:38 AM

He's got this idea stuck in his head that WEP is safer than WPA, even though I showed him the whole FBI thing. One of those big 'administrators' that don't administer much anything besides their home computer.

I just use dialup for secure stuff and the wireless for faster stuff. Honestly, I feel strangely more comfortable with someone on the other side of the world getting my private information than any kids around here with Airopeek and too much free time...

... wait...