Karsten M. Self wrote:
on Tue, May 22, 2001 at 11:54:42PM -0700, Erik Steffl ([EMAIL PROTECTED])
wrote:
I have just found out that ~erik/.Xauthority is owned by root and I
cannot access my X server (I couldn't run any X applications).
You every symlink or hardlink this to your root .Xauthority file, by any
chance?
no, but I used (as root) xauth -merge ~erik/.Xauthority (I just read
it recently on the list, IIRC it was your advice, I wasn't using it
before so I'm wondering if that could be responsible in some strange
way).
I have no idea how that happened, I have started additional X server
as root (startx -- :1), just like many times before, doing some testing
of mouse settings.
and now I checked more and I see that huge number of files in my home
directory (10813out of 122342 (that includes ., .. and directories) have
group set to root. Some files have group set to users. Most of them have
group set to erik.
How'd you start as root? Did you 'su' or 'su -'?
su, so it's usually somewhere in ~erik tree but I only su when I
really need it - editing some system wide config files, running apt-get
etc... I never do any regular work as root. note that only group is set
to root, the owner is still erik, when I create file as erik or as root
(us-ed) they have expected owner/group:
jojda:~cat rrr
test
jojda:~ls -l rrr
-rw-r--r--1 erik erik5 May 23 10:12 rrr
jojda:~su
Password:
jojda:/home/erik# cat rrr_root
test
jojda:/home/erik# ls -l rrr_root
-rw-r--r--1 root root5 May 23 10:12 rrr_root
none of them is erik/root or erik/users.
jojda:~groups
erik disk audio dip www-data video
jojda:~grep erik /etc/passwd
erik:x:1000:1000:Erik Steffl,,,:/home/erik:/usr/bin/tcsh
examples of files:
-rw-r--r--1 erik users 1910784 May 1 23:08
Chaos_Uk_-_Skate_Song.3.
mp3
...
-rw-r--r--1 erik root 143 Nov 3 2000 Miro Zbirka -
Dr.Jackyl
Mr.Hyde.mp3
...
-rw-r--r--1 erik users 4390912 Nov 3 2000
Miro_Zbirka_-_C'est_La_V
ie.mp3
note the same date on the last two of them - it was probably same
gnapster session...
Running gnapster as root? You play Russian roulette when you're bored
as well?
I have been know to pull tiger's tail on occasion (see
http://mtm.host.sk/images/page_01.htm) but I'd never run gnapster (and
most other apps) as root. also note that the other file has group set to
users while user erik is not even member of users:
jojda:~groups
erik disk audio dip www-data video
that's what's puzzling me.
I copied lot of files from old disk (back from when I was using
slackware) so at first I though I screwed it during moving of the files
but these files were created long after move (they were created on the
same day)
most (all?) of the fiels with groups = users was downloaded by
napster, but I don't see any pattern to the files where group is set to
root.
$ find ~ -user root -print0 | xargs -0 ls -ld
...and explore for patterns.
I already did, I see no patterns. as I said, I thouhgt it might have
something to do with my moving partitions and directories around, but
that was long time before some of these files were created (with groups
root and users)
btw there are no suspicious files owned by root (there are some, mutt
source package etc. I don't use fakeroot), only the groups (rootusers)
are suspicious/mysterious.
take a look at following sample, the date doesn't seem to matter, so
it wasn't some particular event that changed them, it seems like it is
something that's happening all the time. I have no idea what it could
be, though. I su to root ONLY when it's needed (in some cases I could do
without it, setting fakeroot or sudo for particular tasks):
drwx-- 106 erik root 4096 May 23 10:55 .
drwxr-xr-x 14 root root 4096 May 12 19:32 ..
drwx--S---2 erik root 4096 Sep 16 2000 .AbiSuite
drwxr-sr-x3 erik root 4096 Apr 28 21:56 .August
drwx--S---2 erik root 4096 Oct 20 2000 .BWap
drwx--S---3 erik root 4096 Mar 31 13:28 .BitchX
lrwxrwxrwx1 erik root 31 Jan 19 00:06
.DCOPserver_jojda - /home/erik/.DCOPserver_jojda_:0
-rw---1 erik root 104 Apr 14 23:59 .FvConHist
srwxr-xr-x1 erik root0 Apr 14 23:59 .FvConSocket
prw---1 erik erik0 May 22 21:49 .FvwmCommandC
prw---1 erik erik0 May 22 21:49 .FvwmCommandM
drwxr-sr-x3 erik root 4096 Nov 18 2000 .Latte
drwxr-sr-x2 erik erik 4096 Aug 4 2000 .Lin-city
-rw---1 erik root 32 Apr 21 00:53
.MCOP-random-seed
-rw-rw-r--1 erik root23249 May 20 11:54
.RealNetworks_RealMediaSDK_60
-rw-rw-r--1 erik root 2276 May 20 11:54
.RealNetworks_RealPlayer_60
-rw-rw-r--1 erik root 106 May
