LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices


Reply
  Search this Thread
Old 01-04-2004, 11:53 PM   #1
sheka&teka
LQ Newbie
 
Registered: Sep 2003
Distribution: mandrake
Posts: 12

Rep: Reputation: 0
mandrake with "very high" security


I installed mandrake with "very high security" setup and as a server .

I don't know if that has anything to do with the fact that I can't find anywhere on my desktop or on the graphic login screen something that will shut down the computer and I have to log from a terminal to use the init 6 command.

Also , when I try to log from a terminal using the root user it doesn't let me and I have to log as a regular user and use the su command.

And one more thing, I can't see any user names on the logon screen to the graphic mode.
 
Old 01-05-2004, 01:01 AM   #2
carlywarly
Member
 
Registered: Feb 2003
Location: Sunny Southport, again.
Distribution: PCLinuxOS 0.93 and 0.92, Vector sometimes
Posts: 825

Rep: Reputation: 30
It is considered a security risk to allow a regular user to power down a server with high security.

It is also a security risk to allow a graphical log-in to root.

Finally, go into the KDE control panel, System - Login Manager. Choose Users tab, and here you can decide which users are no-show etc.
 
Old 01-05-2004, 06:33 AM   #3
moonloader
Member
 
Registered: Nov 2003
Location: linuxquestions.org
Distribution: Linux and BSD
Posts: 229

Rep: Reputation: 30
hi!like oarlywarly said it is for security purpuses and you shouldn't login as root!but if you insist you can create kfm with right of root and then you can enter the file manager as normal user (sure you need root password)another good thing webmin try that instead
 
Old 01-05-2004, 11:14 AM   #4
sheka&teka
LQ Newbie
 
Registered: Sep 2003
Distribution: mandrake
Posts: 12

Original Poster
Rep: Reputation: 0
init 6

so is it ok to shutdown the computer with the init 6 command ?

I don't cause any damage to my computer when I do that ?

should I log out the graphic mode before doing that ?
 
Old 01-05-2004, 11:16 AM   #5
sheka&teka
LQ Newbie
 
Registered: Sep 2003
Distribution: mandrake
Posts: 12

Original Poster
Rep: Reputation: 0
another problem

another problem is that I can't login as root not to the graphic mode but to the shell. I have to use one of my users account and only than to use the su command , change to the root user and logout or anything else.

is it normal ?
 
Old 01-05-2004, 08:22 PM   #6
mac_phil
Member
 
Registered: Sep 2003
Distribution: Mandrake 10.0
Posts: 200

Rep: Reputation: 30
Re: another problem

Quote:
Originally posted by sheka&teka
another problem is that I can't login as root not to the graphic mode but to the shell. I have to use one of my users account and only than to use the su command , change to the root user and logout or anything else.

is it normal ?
Your 'very high' security setting is defined by an optional mandrake program called msec. I do not use msec so cannot say whether this is 'normal', but it is reasonable.

You should not find this to be an inconvenience. Logging in as root is a bad habit.
 
Old 01-06-2004, 12:33 AM   #7
pzatch
Member
 
Registered: Aug 2003
Location: Ohio
Posts: 173

Rep: Reputation: 30
When the graphic log in asks for a user try typing in the word root instead of a user.

But yes logging in as root is a bad security risk and running the GUI as root is even worse. With just one wrong click you could open your system to the whole of the net. Or at least you could remove whole sections of code that the system needs to even load and run.

Linux is not windows and will not ask the root administrator three times if he wants to remove any part of the OS. It just assumes he knows what hes doing and does it.

having your system security up that high is really not nessesary unless you are setting up a local network and will have untrusted people on the system. Like little siblings who might just turn it on and start removing what they don't know. Mine is a single user desktop system and I only have it set at standard. On the net 24/7 and never had a problem. Ever.
 
Old 01-06-2004, 11:02 AM   #8
sheka&teka
LQ Newbie
 
Registered: Sep 2003
Distribution: mandrake
Posts: 12

Original Poster
Rep: Reputation: 0
Login in from shell

What I am trying to say is that my problem to log in as root is not in the graphic mode. it works there just fine.
The problem is from shell, the black screen with the command line.....
 
Old 01-06-2004, 11:46 AM   #9
xscott
LQ Newbie
 
Registered: Jan 2004
Distribution: Mandrake 9.2
Posts: 7

Rep: Reputation: 0
I have the same issue.

My question: Is there a way to initiate a command as ROOT from the command line as another user logged in?

This is to avoid logging in as Root and messing something up as a novice/beginner linux user. Setting up Drake9.2 as a internal web server / FTP server with hopes to open up to internet for minimal personal access.

thanks
 
Old 01-06-2004, 01:10 PM   #10
mac_phil
Member
 
Registered: Sep 2003
Distribution: Mandrake 10.0
Posts: 200

Rep: Reputation: 30
Re: Login in from shell

Quote:
Originally posted by sheka&teka
What I am trying to say is that my problem to log in as root is not in the graphic mode. it works there just fine.
The problem is from shell, the black screen with the command line.....
I responded to just this problem. As I said, if you find this inconvenient, you have developed a bad habit. Do not log into the shell as root. Log in as a user, then use the su - command.

Logging in as root in 'graphic mode' is an even worse habit. Don't do it! It is unnecessary, dangerous, and inconvenient. Always log in as a user. You can always open a terminal and enter the su - command. If you need to run a graphical application as root, start it from a terminal after doing su -.

If you're having specific problems figuring out how to do something without logging in as root, ask here.

Last edited by mac_phil; 01-06-2004 at 01:14 PM.
 
Old 01-06-2004, 01:11 PM   #11
mac_phil
Member
 
Registered: Sep 2003
Distribution: Mandrake 10.0
Posts: 200

Rep: Reputation: 30
Quote:
Originally posted by xscott
I have the same issue.

My question: Is there a way to initiate a command as ROOT from the command line as another user logged in?
su -c command
 
Old 01-06-2004, 06:32 PM   #12
xscott
LQ Newbie
 
Registered: Jan 2004
Distribution: Mandrake 9.2
Posts: 7

Rep: Reputation: 0
Thanks Mac_phil

Excellent Info.
 
Old 01-07-2004, 04:47 AM   #13
sheka&teka
LQ Newbie
 
Registered: Sep 2003
Distribution: mandrake
Posts: 12

Original Poster
Rep: Reputation: 0
Re: Re: Login in from shell

Quote:
Originally posted by mac_phil
I responded to just this problem. As I said, if you find this inconvenient, you have developed a bad habit. Do not log into the shell as root. Log in as a user, then use the su - command.

Logging in as root in 'graphic mode' is an even worse habit. Don't do it! It is unnecessary, dangerous, and inconvenient. Always log in as a user. You can always open a terminal and enter the su - command. If you need to run a graphical application as root, start it from a terminal after doing su -.

If you're having specific problems figuring out how to do something without logging in as root, ask here.
First, thanks for replying.
Second, I know it's a bad habit and I do not usually do that. I only need to login as root when I want to reboot my computer.
Since I have high security setting, I can't boot from the graphic mode, so I close the graphic mode and shell to boot. In this case I know that I have to be root in order to issue the init command so I want to login as root instead of login as user and than su.
So my question is, do I have a bug here or should it be like that ? Is it ok that I can't login as root and have to login as user and use the su command?
 
Old 01-07-2004, 05:53 AM   #14
asktoby
Member
 
Registered: Jul 2003
Location: Cardiff, England ;)
Distribution: Mandrake 9.1
Posts: 94

Rep: Reputation: 15
Hi have my computer on one of the higher security settings, and to re-boot I run the command:
halt

I'm not saying that's a good idea, but it's what I do and it seems to work!
 
Old 01-07-2004, 06:44 AM   #15
Bebo
Member
 
Registered: Jul 2003
Location: Göteborg
Distribution: Arch Linux (current)
Posts: 553

Rep: Reputation: 31
Hi,

The issues you have with the "very high" security setting sounds very reasonably to me, so that's nothing to worry about. Try out "paranoid", and you'll have a computer that won't allow you to do anything

Some other comments...

Instead of init #, where # is 0 or 6, check out halt, poweroff, reboot, or shutdown. shutdown will need some options, for instance -h now, or -r now.

Use su - instead of su, to make the shell a login shell - that will give you root's paths and settings as well.

It is a good habit to unable root to log in directly, like the "very high" security level in Mandrake does. For your information, /etc/securetty contains the device names of tty lines (one per line, # without leading /dev/) on which root is allowed to login (OK, I'm paraphrasing ). For instance, put "tty1" (without quotes) on a line if you want to be able to login as root in the first tty (the one you access with Ctrl+Alt+F1).

Cheers

Last edited by Bebo; 01-07-2004 at 06:45 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
bind error on high ports "address already in use" DCalabrese Linux - Networking 2 05-25-2005 09:21 AM
Grip, if "Allow high bits in filenames" on then there is a problem with encoding. brynjarh Linux - Software 0 10-24-2004 11:44 AM
redhat-config-securitylevel constantly on "high"... tom_on_linux Linux - Networking 4 07-07-2004 08:09 AM
Mandrake 10: Issues with "higher" security setting and web server maverick106 Mandriva 6 04-26-2004 10:39 AM
does failed using urpmi messed up my "Install Software" / "mandrake update" ??? sirpelidor Mandriva 1 11-02-2003 09:00 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva

All times are GMT -5. The time now is 07:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration