View previous topic :: View next topic |
Author |
Message |
Bosnian[X] n00b
Joined: 12 Jul 2002 Posts: 66 Location: Sweden, Malmö
|
Posted: Tue Jul 16, 2002 9:49 am Post subject: Should i add user or use root on a single machine???? |
|
|
Hello,
Well, i had always used Linux with user and not root (su root) but i was wondering if it's safe to use Linux as root on my machine, because it's only me that uses my computer. I sick and tired of "su root" all the time.
If it's ok what should i think about in security way...
Thanx in advance....
//BosnianX |
|
Back to top |
|
|
Amorphis n00b
Joined: 16 Jul 2002 Posts: 30
|
Posted: Tue Jul 16, 2002 9:52 am Post subject: |
|
|
Biggest security issue is that you can accidentaly do something like 'rm -R *' on the wrong place
Using a different user from root prevents that you, or some script you are running, destroy important files from your system. |
|
Back to top |
|
|
Bosnian[X] n00b
Joined: 12 Jul 2002 Posts: 66 Location: Sweden, Malmö
|
Posted: Tue Jul 16, 2002 10:11 am Post subject: |
|
|
Okay, im very carefull when i type those kind of commands "rm -R *" (haven't
tried it yet ) but besides that is there any other things that i should consider when i use root ?????
or is there any good tutorial how to config user accounts so i don't have to "su root" all the time??? |
|
Back to top |
|
|
Amorphis n00b
Joined: 16 Jul 2002 Posts: 30
|
Posted: Tue Jul 16, 2002 10:16 am Post subject: |
|
|
Try this:
http://www.geocities.com/usmbish/hdi-sudo.html
You can add users to the sudoers list so they only have to add 'sudo' to the beggining of a command they wish to execute as root. |
|
Back to top |
|
|
Bosnian[X] n00b
Joined: 12 Jul 2002 Posts: 66 Location: Sweden, Malmö
|
Posted: Tue Jul 16, 2002 10:21 am Post subject: |
|
|
Dude, thanx a lot....gonna try this one as soon as i get back from the beach....
P.S
It's 26 C in Sweden.... Can u belive it!!!! |
|
Back to top |
|
|
DArtagnan l33t
Joined: 30 Apr 2002 Posts: 942 Location: Israel, Jerusalem
|
Posted: Tue Jul 16, 2002 10:58 am Post subject: |
|
|
Bosnian[X] wrote: | Dude, thanx a lot....gonna try this one as soon as i get back from the beach....
P.S
It's 26 C in Sweden.... Can u belive it!!!! |
It's 40 C in Israel, can you believe it? _________________ All for one and one for All
--
MACPRO machine... |
|
Back to top |
|
|
jay l33t
Joined: 08 May 2002 Posts: 980
|
Posted: Tue Jul 16, 2002 1:59 pm Post subject: |
|
|
It's pissin' out here since a week and no good weather in sight. But away from this I STRONGLY recommend you to set up a user for gentoo. The main security risk is, that you are running all apps (browsers, p2p etc..) as root, so you make it VERY easy for a possible intruder to gain root access after a buffer overflow.
I also recommend you to have a look at this document:
http://www.gentoo.org/doc/gentoo-security.html
It will give you an idea what may happen if you consider security not so important. _________________ Do you want your posessions identified? [ynq] (n) |
|
Back to top |
|
|
rizzo Retired Dev
Joined: 30 Apr 2002 Posts: 1067 Location: Manitowoc, WI, USA
|
Posted: Wed Jul 17, 2002 12:33 pm Post subject: |
|
|
I definitely recommend using a normal user for day-to-day activity. I am the only one on my workstation and I log in as my user. I only su to root for emerges and system config stuff. 99.9% of my activity is (and should be) done as my regular user. |
|
Back to top |
|
|
reverius42 Apprentice
Joined: 16 Jul 2002 Posts: 166 Location: Tucson, AZ
|
Posted: Wed Jul 17, 2002 10:45 pm Post subject: Creating user |
|
|
Bosnian[X] wrote: | Okay, im very carefull when i type those kind of commands "rm -R *" (haven't
tried it yet ) but besides that is there any other things that i should consider when i use root ?????
or is there any good tutorial how to config user accounts so i don't have to "su root" all the time??? |
Making a user account on Gentoo can be confusing, but here's what I've come up with (lets assume the user's name is reverius):
Code: | root@host# adduser reverius |
This creates the user.
Code: | root@host# passwd reverius
Enter new password: ********
Repeat new password: ********
Done. |
This gives the user a password.
Code: | root@host# mkdir /home/reverius |
This creates a home directory for the user.
Code: | root@host# chown -R reverius /home/reverius |
This makes the user own his own home directory.
This should make a user account, and make it usable. To do things like use a sound card (or be able to su to root!) the user has to be a member of certain groups. I don't remember which ones, or the command to do that - it's in the Gentoo documentation somewhere.
Hope this helps! _________________ Even a stopped clock gives the right time twice a day. |
|
Back to top |
|
|
therobot Apprentice
Joined: 07 Jun 2002 Posts: 256 Location: Canada
|
Posted: Wed Jul 17, 2002 11:03 pm Post subject: |
|
|
superadduser
it's easy and gets it all done. |
|
Back to top |
|
|
Shak n00b
Joined: 13 Jul 2002 Posts: 34 Location: Huddersfield UK
|
Posted: Thu Jul 18, 2002 8:42 am Post subject: |
|
|
When using root all the time you become more relaxed about using it and may accidentaly issue a rm -r command when in /
Sometimes the root user can be . So its a good idea to keep safe and sound with a normal user, suing can be a pain sometimes but its worth it for having the security of not rm -r ing your whole / partition
Shak |
|
Back to top |
|
|
Flake n00b
Joined: 19 Apr 2002 Posts: 44 Location: The Netherlands
|
Posted: Thu Jul 18, 2002 10:57 am Post subject: |
|
|
related to this subject is something that confuses me.
the skeleton directory, usedas a mask for all futute home directories.
how does this work,
what should be in it,
can you just copy some files from a user with all the right sellings to it ?? |
|
Back to top |
|
|
Black666 n00b
Joined: 15 Jul 2002 Posts: 61 Location: Vienna (Austria)
|
Posted: Fri Jul 19, 2002 6:27 am Post subject: |
|
|
therobot wrote: | superadduser
it's easy and gets it all done. |
Thanks ..... It's really easy with superadduser.. |
|
Back to top |
|
|
|