Re: OT: sudo questions

2013-08-24 Thread Lisi Reisz
On Friday 23 August 2013 22:56:22 Doug wrote: On 08/23/2013 04:24 PM, Luther Blissett wrote: /snip/ So I did a long search around, since I had absolutely no idea where I was getting into. Back then I used to think that what was getting in the way of free software were usability and

Re: OT: sudo questions

2013-08-24 Thread Curt
On 2013-08-24, Lisi Reisz lisi.re...@gmail.com wrote: You may be superhuman and never, ever make mistakes. Most of us are human and do make mistakes. Maybe he did make one. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: OT: sudo questions

2013-08-23 Thread Luther Blissett
Since everyone is giving away their bits os appreciation, I felt like giving mine. My first ever GNU/Linux distro was some old Red Hat, which I couldn't handle well and was dropped in favor of Suse. Once again I had trouble with network hardware and was forced to dive in the command line with

Re: OT: sudo questions

2013-08-23 Thread Doug
On 08/23/2013 04:24 PM, Luther Blissett wrote: /snip/ So I did a long search around, since I had absolutely no idea where I was getting into. Back then I used to think that what was getting in the way of free software were usability and shinny. /snip/ Funny I never *really* tried other

Re: OT: sudo questions

2013-08-23 Thread Ralf Mardorf
On Fri, 2013-08-23 at 17:56 -0400, Doug wrote: On 08/23/2013 04:24 PM, Luther Blissett wrote: /snip/ So I did a long search around, since I had absolutely no idea where I was getting into. Back then I used to think that what was getting in the way of free software were usability and

Re: OT: sudo questions

2013-08-23 Thread Bob Proulx
Doug wrote: Luther Blissett wrote: help I found in this community. Oh, and the shell... what a shinny little thing, full of secrets. I'm confused. I only know shinny as a verb: to shinny up a pole, or a tree, etc. To climb, as a kid would. Here he uses it as a noun and an adjective, and

Re: OT: sudo questions

2013-08-23 Thread Ralf Mardorf
On Fri, 2013-08-23 at 16:47 -0600, Bob Proulx wrote: Doug wrote: Luther Blissett wrote: help I found in this community. Oh, and the shell... what a shinny little thing, full of secrets. I'm confused. I only know shinny as a verb: to shinny up a pole, or a tree, etc. To climb, as a

Re: OT: sudo questions

2013-08-23 Thread Luther Blissett
On Sat, 2013-08-24 at 00:15 +0200, Ralf Mardorf wrote: On Fri, 2013-08-23 at 17:56 -0400, Doug wrote: On 08/23/2013 04:24 PM, Luther Blissett wrote: /snip/ So I did a long search around, since I had absolutely no idea where I was getting into. Back then I used to think that what was

Re: OT: sudo questions

2013-08-23 Thread Zenaan Harkness
On 8/24/13, Luther Blissett lbliss...@paranoici.org wrote: On Sat, 2013-08-24 at 00:15 +0200, Ralf Mardorf wrote: On Fri, 2013-08-23 at 17:56 -0400, Doug wrote: On 08/23/2013 04:24 PM, Luther Blissett wrote: /snip/ So I did a long search around, since I had absolutely no idea where I

Re: sudo questions

2013-08-20 Thread Zenaan Harkness
On 8/20/13, Chris Bannister cbannis...@slingshot.co.nz wrote: On Mon, Aug 19, 2013 at 11:12:15AM +1000, Zenaan Harkness wrote: On a more hair splitting note, we could say it is Universal, at the price of being a little more generic sometimes than it could otherwise be. If you are going to

Re: sudo questions

2013-08-20 Thread berenger . morel
Le 19.08.2013 14:22, Ralf Mardorf a écrit : For other tastes, there are other good distros too. Bad distros among the well known IMO are only those, that don't have a community, such as e.g. Mint. Mint might be ok, but when those people run into issues, they ask at Debian and Ubuntu lists.

OT: sudo questions

2013-08-20 Thread Ralf Mardorf
On Tue, 2013-08-20 at 18:06 +0200, berenger.mo...@neutralite.org wrote: [ ubuntu | archlinux | gentoo ] $ cat /etc/issue Arch Linux \r (\l) This is my main distro, IOW the distro I like the best, while switching to systemd wasn't the best idea, it split the community, people were banned from

Re: sudo questions

2013-08-19 Thread Ralf Mardorf
On Mon, 2013-08-19 at 11:12 +1000, Zenaan Harkness wrote: On 8/19/13, Bob Proulx b...@proulx.com wrote: I know you would like the installer to do exactly what your custom strategy is for your system. But that is difficult. There are many custom strategies. Debian IS! THE! Universal!

Re: sudo questions

2013-08-18 Thread Chris Bannister
On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: johndoe sounds like a great name for an admin account. There's a Debian BSD port ;), so how about Charlie Root? [snip] too long, didn't read IOW, tl;dr -- If you're not

Re: sudo questions

2013-08-18 Thread Ralf Mardorf
On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: johndoe sounds like a great name for an admin account. There's a Debian BSD port ;), so how about Charlie Root?

Re: sudo questions

2013-08-18 Thread Brian
On Sun 18 Aug 2013 at 06:51:04 +0900, Joel Rees wrote: On Sun, Aug 18, 2013 at 4:03 AM, Brian a...@cityscape.co.uk wrote: On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: But debian's installer tries to encourage the user to not enable root, No, it doesn't. Perhaps you would

Re: sudo questions

2013-08-18 Thread Chris Bannister
On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: [snip] too long, didn't read IOW, tl;dr In my opinion it won't add more sane security, if a

Re: sudo questions

2013-08-18 Thread Zenaan Harkness
On 8/18/13, Chris Bannister cbannis...@slingshot.co.nz wrote: On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: [snip] too long, didn't read IOW,

Re: sudo questions

2013-08-18 Thread Ralf Mardorf
On Sun, 2013-08-18 at 21:40 +1000, Zenaan Harkness wrote: On 8/18/13, Chris Bannister cbannis...@slingshot.co.nz wrote: On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf

Re: sudo questions

2013-08-18 Thread Joel Rees
On Sun, Aug 18, 2013 at 7:32 PM, Brian a...@cityscape.co.uk wrote: On Sun 18 Aug 2013 at 06:51:04 +0900, Joel Rees wrote: On Sun, Aug 18, 2013 at 4:03 AM, Brian a...@cityscape.co.uk wrote: On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: But debian's installer tries to encourage the

Re: sudo questions

2013-08-18 Thread Bob Proulx
Joel Rees wrote: Maybe I need to file a feature request (for my own satisfaction, even if it gets rejected). What I lean towards is providing the installing user (1) the opportunity to set the root password, (2) the opportunity to set a separate admin account and password (member of sudo

Re: sudo questions

2013-08-18 Thread Zenaan Harkness
On 8/19/13, Bob Proulx b...@proulx.com wrote: Joel Rees wrote: Maybe I need to file a feature request (for my own satisfaction, even if it gets rejected). What I lean towards is providing the installing user (1) the opportunity to set the root password, (2) the opportunity to set a separate

Re: sudo questions

2013-08-17 Thread Joel Rees
In case you're still confused, I'll try a little more direct response. (Lots of informative responses in this thread, but I feel a blog coming on. The rant I wrote on this a long time ago needs updating.) On Wed, Aug 14, 2013 at 7:14 PM, François Patte francois.pa...@mi.parisdescartes.fr wrote:

Re: sudo questions

2013-08-17 Thread Brian
On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: But debian's installer tries to encourage the user to not enable root, No, it doesn't. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive:

Re: sudo questions

2013-08-17 Thread Ralf Mardorf
On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: johndoe sounds like a great name for an admin account. There's a Debian BSD port ;), so how about Charlie Root? [snip] too long, didn't read -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe.

Re: sudo questions

2013-08-17 Thread Joel Rees
On Sun, Aug 18, 2013 at 4:03 AM, Brian a...@cityscape.co.uk wrote: On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: But debian's installer tries to encourage the user to not enable root, No, it doesn't. Perhaps you would rather I said something like, it gives the option to establish an

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be changed if they are to be blocked, which means communicating the new password to all the required users. I

Re: sudo questions

2013-08-16 Thread Jerry Stuckle
On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be changed if they are to be blocked, which means

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be

Re: sudo questions

2013-08-16 Thread Ralf Mardorf
On Fri, 2013-08-16 at 17:08 +0200, berenger.mo...@neutralite.org wrote: Why would it be worse than a shared admin account? For the shared account, I can easily understand why it's not something to do, but I can not see the problem with multiple root accounts? (I did not said that the admins

Re: sudo questions

2013-08-16 Thread Jerry Stuckle
On 8/16/2013 11:08 AM, berenger.mo...@neutralite.org wrote: Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 17:43, Ralf Mardorf a écrit : On Fri, 2013-08-16 at 17:08 +0200, berenger.mo...@neutralite.org wrote: Why would it be worse than a shared admin account? For the shared account, I can easily understand why it's not something to do, but I can not see the problem with multiple

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 17:50, Jerry Stuckle a écrit : On 8/16/2013 11:08 AM, berenger.mo...@neutralite.org wrote: Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password,

sudo questions

2013-08-14 Thread François Patte
Bonjour, For some unknown reason I did not activate the root account during the installation. I activated it from a user account, say John Doe. Now John Doe can become root anytime and do anything on my machine. How can I deactivate this? I have seen that John Doe is a member of almost all

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
You can set up a root account, but you anyway shouldn't run X sessions as root. The Debian on my machine and all Debian installs I ever used had a root account by default, but sudo wasn't enabled. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe.

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 12:49 +0200, Ralf Mardorf wrote: You can set up a root account, but you anyway shouldn't run X sessions as root. The Debian on my machine and all Debian installs I ever used had a root account by default, but sudo wasn't enabled. Oops, pushed the wrong button, I wanted to

Re: sudo questions

2013-08-14 Thread Darac Marjal
On Wed, Aug 14, 2013 at 12:14:47PM +0200, François Patte wrote: Bonjour, For some unknown reason I did not activate the root account during the installation. I activated it from a user account, say John Doe. Now John Doe can become root anytime and do anything on my machine. How can I

Re: sudo questions

2013-08-14 Thread François Patte
Le 14/08/2013 14:44, Darac Marjal a écrit : On Wed, Aug 14, 2013 at 12:14:47PM +0200, François Patte wrote: Bonjour, For some unknown reason I did not activate the root account during the installation. I activated it from a user account, say John Doe. Now John Doe can become root anytime

Re: sudo questions

2013-08-14 Thread Jerome BENOIT
Hello, On 14/08/13 15:30, François Patte wrote: Moeover, by default on my debian install, I could see that root login through ssh is allowed: is it really the default configuration? Yeap ! For details, read the subsection `PermitRootLogin set to yes' in the first section of

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 8:44 AM, Darac Marjal wrote: I believe the idea is to discourage people from logging in as root. You can't get rid of root completely (any user with an ID of 0 is root), nor would you want to. But there have been many a horror story of people logging in as a super-user (either Root

Re: sudo questions

2013-08-14 Thread Lars Noodén
On 14.08.2013 17:36, Jerry Stuckle wrote: I agree in principle that sudo is better then su. The problem I have with it is security; when you use sudo you type in your own password. So if your password is compromised, the hacker can do anything the sudo user can do - which may be very bad.

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
root usually does connect to the Internet too, e.g. to run apt, ntp, etc. pp., even the internet connection for the user has to be established by root, maybe not by a human being, but at least e.g. on startup automatically. You don't have to give a user special permissions, it's the admin's task

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: However, when I use su, I need to key in the root password before doing anything. This adds another layer of security to the system. He? Than configure sudo to ask for the password too. [rocketmouse@archlinux ~]$ sudo mcedit [sudo]

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 12:04 PM, Ralf Mardorf wrote: On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: However, when I use su, I need to key in the root password before doing anything. This adds another layer of security to the system. He? Than configure sudo to ask for the password too.

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 10:40 AM, Lars Noodén wrote: On 14.08.2013 17:36, Jerry Stuckle wrote: I agree in principle that sudo is better then su. The problem I have with it is security; when you use sudo you type in your own password. So if your password is compromised, the hacker can do anything the sudo

Re: sudo questions

2013-08-14 Thread Joe
On Wed, 14 Aug 2013 12:21:43 -0400 Jerry Stuckle jstuc...@attglobal.net wrote: On 8/14/2013 12:04 PM, Ralf Mardorf wrote: On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: However, when I use su, I need to key in the root password before doing anything. This adds another layer of

Re: sudo questions

2013-08-14 Thread Bob Proulx
Jerry Stuckle wrote: Darac Marjal wrote: I believe the idea is to discourage people from logging in as root. I think it is more one of trying to simplify things for the non-technical user. Having non-technical users deal with one password is hard. Having non-technical users deal with two

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 20:03 +0100, Joe wrote: it has the sudo advantages [snip] of being required for each command. That's not true and it would be a disadvantage. [rocketmouse@archlinux ~]$ su Password: [root@archlinux rocketmouse]# exit [rocketmouse@archlinux ~]$ sudo -i [sudo] password for

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
An advantage of sudo: [rocketmouse@archlinux ~]$ su -c mcedit /etc/fstab su: user /etc/fstab does not exist [rocketmouse@archlinux ~]$ su -c mcedit /etc/fstab Password: [rocketmouse@archlinux ~]$ sudo mcedit /etc/fstab [sudo] password for rocketmouse: If you work much with command line as user

Re: sudo questions

2013-08-14 Thread Richard Hector
On 15/08/13 01:30, François Patte wrote: I think that sudo system is less secure than the old system root account. 1) Anybody with sudo root permission (as it is the case for the first person using sudo after an installation) can do sudo bash and he can run as many commands as he wants as