[SOLVED] question about `su` and `su -l`

rizitis · 04-18-2024, 01:59 PM

What is the the best way to check someone if he is in full root mode "su -l" or not like "su" in a Slackware system?

thank you.

EDIT:EXAMPLE

Code:

Thu Apr-4 10:06:59pm)-(CPU 0.8%:0:Net 16)-(omen:~)-(66M:158)
> id
uid=1000(omen) gid=100(users) groups=100(users),7(lp),10(wheel),17(audio),18(video),19(cdrom),71(input),83(plugdev),84(power),86(netdev),93(scanner),281(docker),996(vboxusers)
(Thu Apr-4 10:07:02pm)-(CPU 0.8%:0:Net 16)-(omen:~)-(66M:158)
> su
Password: 
(Thu Apr-4 10:07:02pm)-(CPU 0.8%:0:Net 16)-(root:/home/omen)-(66M:158)
> id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),17(audio)
(Thu Apr-4 10:07:02pm)-(CPU 0.8%:0:Net 16)-(root:/home/omen)-(66M:158)
> exit
exit
(Thu Apr-4 10:07:20pm)-(CPU 0.8%:0:Net 15)-(omen:~)-(66M:158)
> su -l
Password: 

Think big.
Pollute the Mississippi.

root@omen64:~# id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),17(audio)
root@omen64:~#

su and su -l gives the same output.

Windu · 04-18-2024, 02:09 PM

Counter question, what else is there except a "full root mode"? You can not be a half-root, right?
Unless you limit someone's authorizations using sudoers but then you would have to prevent the use of "su" and only allow "sudo".

gus3 · 04-18-2024, 02:29 PM

With "su -l", it's a "full login stuff" including the /etc/profile.d/* scripts.

But with "su", it's just for permissions, usually for root, and never mind all the "full login stuff".

rizitis · 04-18-2024, 02:31 PM

Quote:

Originally Posted by Windu

Counter question, what else is there except a "full root mode"? You can not be a half-root, right?
Unless you limit someone's authorizations using sudoers but then you would have to prevent the use of "su" and only allow "sudo".

a) Try su and then $PATH
b) Try su -l and then $PATH

did you adopted same PATH environment variables?

Tonus · 04-18-2024, 02:35 PM

Check ENV PATH or bash_history ?

Edit : sorry,hadn't refreshed the page before answering

volkerdi · 04-18-2024, 02:37 PM

Give this a try:

Code:

#!/bin/bash
if [ ! "$USER" = "root" ]; then
  echo "no su"
elif echo $XDG_CONFIG_DIRS | grep -q "^/home/" ; then
  echo "su"
else
  echo "su -l"
fi

rizitis · 04-18-2024, 02:46 PM

Quote:

Originally Posted by volkerdi

Give this a try:

Code:

#!/bin/bash
if [ ! "$USER" = "root" ]; then
  echo "no su"
elif echo $XDG_CONFIG_DIRS | grep -q "^/home/" ; then
  echo "su"
else
  echo "su -l"
fi

It give the same answer "su -l" for both su and su -l in my system.
The only thing I found so far is the $PATH cmd.

volkerdi · 04-18-2024, 02:54 PM

Ah, I see. The previous script fails outside of an X environment.

Try this one:

Code:

#!/bin/bash
if [ ! "$USER" = "root" ]; then
  echo "no su"
elif [ -z "$XDG_RUNTIME_DIR" ]; then
  echo "su -l"
else
  echo "su"
fi

rizitis · 04-18-2024, 03:01 PM

The reason of asking was this:
I made a fork of ktsuss and edited su_backend.c and su_backend.h
After this edits user can execute everything in full root mode even if user is not in wheel group and no sudo needed at all.
examples:

Code:

ktsuss gparted
ktsuss slackpkg update
ktsuss sbopkg -i package 
ktsuss ./Package.SlackBuild 
etc...

But I m not sure if its safe, if user is not in wheel group to do these?
I guess its safe because since user know root passwd he could do it in any case as root with the traditional way!

rizitis · 04-18-2024, 03:03 PM

Quote:

Originally Posted by volkerdi

Ah, I see. The previous script fails outside of an X environment.

Try this one:

Code:

#!/bin/bash
if [ ! "$USER" = "root" ]; then
  echo "no su"
elif [ -z "$XDG_RUNTIME_DIR" ]; then
  echo "su -l"
else
  echo "su"
fi

That works! thanks PAT.