Re: [qubes-users] Disable root password on fedora-25-minimal (Qubes 4.0rc3)
On Tue, Jan 02, 2018 at 12:51:53PM -0800, Fabrizio Romano Genovese wrote: > Hello all, > > Thanks for the replies! I have already installed sudo just doing > > qvm-run -u root fedora-25-minimal xterm > > as Marek suggested, and then installing sudo as I usually do via dnf. The > problem is that now sudo asks for the root password anyway. If for instance I > give > > sudo dnf update > > on a "standard" terminal shell, I will be prompted for a password. > > I already checked at > > https://www.qubes-os.org/doc/vm-sudo/ > > What I don't have there is the file and > /etc/polkit-1/localauthority/50-local.d/qubes-allow-all.pkla. Should I add it? > > Cheers, > Fab > Yes, if you want to maintain your minimal status you can manually add/edit those files. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180102223814.m4qbok5qddllws2j%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Disable root password on fedora-25-minimal (Qubes 4.0rc3)
Hello all, Thanks for the replies! I have already installed sudo just doing qvm-run -u root fedora-25-minimal xterm as Marek suggested, and then installing sudo as I usually do via dnf. The problem is that now sudo asks for the root password anyway. If for instance I give sudo dnf update on a "standard" terminal shell, I will be prompted for a password. I already checked at https://www.qubes-os.org/doc/vm-sudo/ What I don't have there is the file and /etc/polkit-1/localauthority/50-local.d/qubes-allow-all.pkla. Should I add it? Cheers, Fab -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fa8ea166-ad10-412a-9a66-6d6a34037c01%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Disable root password on fedora-25-minimal (Qubes 4.0rc3)
On Tue, Jan 02, 2018 at 08:16:49PM +0100, 'Tom Zander' via qubes-users wrote: > On Tuesday, 2 January 2018 18:26:27 CET Fabrizio Romano Genovese wrote: > > ...But how? > > The naming is confusing as the root password is not really removed at all. > What happens is that a service called 'sudo' is configured to allow you to > do anything without a password. > > Make sure you have this content at /etc/sudoers.d/qubes) > > https://www.qubes-os.org/doc/vm-sudo/ > > also I suggest double checking that sudo is actually installed. > To install sudo you will, of course need root. You can either use the method Marek details on that page, or use 'sudo xl console 'from dom0 to get root access. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180102201012.kgdzs2q2gdshjtpw%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Disable root password on fedora-25-minimal (Qubes 4.0rc3)
On Tuesday, 2 January 2018 18:26:27 CET Fabrizio Romano Genovese wrote: > ...But how? The naming is confusing as the root password is not really removed at all. What happens is that a service called 'sudo' is configured to allow you to do anything without a password. Make sure you have this content at /etc/sudoers.d/qubes) https://www.qubes-os.org/doc/vm-sudo/ also I suggest double checking that sudo is actually installed. -- Tom Zander Blog: https://zander.github.io Vlog: https://vimeo.com/channels/tomscryptochannel -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1593640.XvPIAPtHh8%40cherry. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Disable root password on fedora-25-minimal (Qubes 4.0rc3)
As in https://github.com/QubesOS/qubes-issues/issues/3157, by default the fedora minimal template will ask for a password while trying to perform any action as root. The rationale behind this is that the "ask/don't ask for root" policy should be customizable by the user. ...But how? I tried editing the /etc/shadow file to remove the root password, with no success whatsoever. I basically would like my minimal template to behave like any other, that is, to have a passwordless root. Any help would be greatly appreciated! Thanks for your Time, Fab -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9cfbdb37-f52f-4650-8c86-f1d2f98e0178%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
