Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Can I disable the root user account ?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Tom_
Guru
Guru


Joined: 20 May 2004
Posts: 395
Location: France

PostPosted: Wed Apr 07, 2010 1:40 pm    Post subject: Can I disable the root user account ? Reply with quote

Hi,

As I use "sudo" on my system, I would like to know if I can disable the root user account ? Is it safe ?

Regards,

Thank you ;)
Back to top
View user's profile Send private message
disi
Veteran
Veteran


Joined: 28 Nov 2003
Posts: 1354
Location: Out There ...

PostPosted: Wed Apr 07, 2010 1:54 pm    Post subject: Reply with quote

Here is some information from arch wiki: http://wiki.archlinux.org/index.php/Sudo

However, do you just don't want them to interactive login or do you really want to disable the account? You could give him a /bin/false as shell or something...
_________________
Gentoo on Uptime Project - Larry is a cow
Back to top
View user's profile Send private message
Tom_
Guru
Guru


Joined: 20 May 2004
Posts: 395
Location: France

PostPosted: Wed Apr 14, 2010 11:58 am    Post subject: Reply with quote

According to http://www.cyberciti.biz/tips/linux-security.html, it is advisable to disable root Login. I don't want any user to be able to log as root.

ArchLinux wiki says that users may encounter problems with disabling the root login. What does it mean ?
Back to top
View user's profile Send private message
phajdan.jr
Retired Dev
Retired Dev


Joined: 23 Mar 2006
Posts: 1777
Location: Poland

PostPosted: Wed Apr 14, 2010 1:35 pm    Post subject: Reply with quote

Tom_ wrote:
According to http://www.cyberciti.biz/tips/linux-security.html, it is advisable to disable root Login. I don't want any user to be able to log as root.


It's important to understand the rationale behind it. If you allow your regular user account to run all commands as root (of course is still asks for the password), you'd effectively make that account a de-facto root account. In my opinion this Ubuntu way of using sudo in place of root is an illusion of additional security. sudo has its place, but it's not to replace root.

For example, if there is a small set of commands that you execute frequently and require root, it's often useful to run them via sudo instead. This way you can't leave the root shel unattended by mistake.

Tom_ wrote:
ArchLinux wiki says that users may encounter problems with disabling the root login. What does it mean ?


Some programs might assume that it's possible to run as root, possibly using "su". The setup without root login would make these break. I don't have any specific examples though.
_________________
http://phajdan-jr.blogspot.com/
Back to top
View user's profile Send private message
pigeon768
l33t
l33t


Joined: 02 Jan 2006
Posts: 679

PostPosted: Wed Apr 14, 2010 3:30 pm    Post subject: Reply with quote

I've had a few situations where running emerge under sudo fails, but running under 'su -' or a root login works.

I didn't chase it down - there is supposed to be a line in /etc/sudoers that takes care of it, but I don't think it worked for me.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum