Re: root password

2012-02-08 Thread James Wilkinson
Steven Stern wrote: I keep meaning to edit the sudo config files to block things like sudo su - sudo bash but I get lazy. Someday, this will bite me in the ***. Note for anyone considering this: it’s virtually impossible to make this watertight, because there are too many ways for

Re: root password

2012-02-08 Thread Steven Stern
On 02/08/2012 02:49 PM, James Wilkinson wrote: Steven Stern wrote: I keep meaning to edit the sudo config files to block things like sudo su - sudo bash but I get lazy. Someday, this will bite me in the ***. Note for anyone considering this: it’s virtually impossible to make this

Re: root password

2012-02-07 Thread Tim
On Mon, 2012-02-06 at 22:28 -0600, Steven Stern wrote: The right way is to boot into single user mode. These will also work if your account has sudo access sudo su - or sudo /etc/shadow and remove the root password, then login as root and reset the password or sudo

Re: root password

2012-02-07 Thread Steven Stern
On 02/07/2012 04:01 AM, Tim wrote: On Mon, 2012-02-06 at 22:28 -0600, Steven Stern wrote: The right way is to boot into single user mode. These will also work if your account has sudo access sudo su - or sudo /etc/shadow and remove the root password, then login as root and reset

Re: root password

2012-02-07 Thread Reindl Harald
Am 07.02.2012 15:04, schrieb Steven Stern: Seems like you're all (the different solutions offered by various people) doing much more than you need to. If you do manage to boot into the single user mode, you will typing in a terminal as the root user. All you have to do, next, is use the

Re: root password

2012-02-07 Thread Mikkel L. Ellertson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/07/2012 04:01 AM, Tim wrote: On Mon, 2012-02-06 at 22:28 -0600, Steven Stern wrote: Seems like you're all (the different solutions offered by various people) doing much more than you need to. If you do manage to boot into the single user

Re: root password

2012-02-07 Thread Joe Zeff
On 02/07/2012 02:01 AM, Tim wrote: There's no need to su or sudo, nor edit any files where passwords are stored. The point is that the sudo trick will work (assuming that you have it set up) without booting into recovery mode. -- users mailing list users@lists.fedoraproject.org To

Re: root password

2012-02-07 Thread Steven Stern
On 02/07/2012 01:01 PM, Joe Zeff wrote: On 02/07/2012 02:01 AM, Tim wrote: There's no need to su or sudo, nor edit any files where passwords are stored. The point is that the sudo trick will work (assuming that you have it set up) without booting into recovery mode. I keep meaning to

Re: root password

2012-02-07 Thread Joe Zeff
On 02/07/2012 02:08 PM, Steven Stern wrote: I keep meaning to edit the sudo config files to block things like sudo su - sudo bash but I get lazy. Someday, this will bite me in the ***. There's a much better, easier way to prevent that: don't activate sudo unless there are people using

Re: root password

2012-02-06 Thread Harish Pillay
On Tue, Feb 7, 2012 at 10:13 AM, Amit Rp amitr...@gmail.com wrote: I forgot the root password. Please advise whether there is any possibility of retrieving  it? go into single user mode and when you are dropped into the prompt, you can change the root password. see:

Re: root password

2012-02-06 Thread Bruno Wolff III
On Tue, Feb 07, 2012 at 07:43:37 +0530, Amit Rp amitr...@gmail.com wrote: I forgot the root password. Please advise whether there is any possibility of retrieving it? It's normally easier to boot into single user mode and change it to something new than to try to recover it. -- users

Re: root password

2012-02-06 Thread Boris Epstein
On Mon, Feb 6, 2012 at 9:14 PM, Bruno Wolff III br...@wolff.to wrote: On Tue, Feb 07, 2012 at 07:43:37 +0530, Amit Rp amitr...@gmail.com wrote: I forgot the root password. Please advise whether there is any possibility of retrieving it? It's normally easier to boot into single user

Re: root password

2012-02-06 Thread Steven Stern
On 02/06/2012 08:13 PM, Amit Rp wrote: I forgot the root password. Please advise whether there is any possibility of retrieving it? The right way is to boot into single user mode. These will also work if your account has sudo access sudo su - or sudo /etc/shadow and remove the root

Re: root password

2012-02-06 Thread Scott Doty
On 02/06/2012 06:47 PM, Boris Epstein wrote: On Mon, Feb 6, 2012 at 9:14 PM, Bruno Wolff III br...@wolff.to mailto:br...@wolff.to wrote: On Tue, Feb 07, 2012 at 07:43:37 +0530, Amit Rp amitr...@gmail.com mailto:amitr...@gmail.com wrote: I forgot the root password. Please

Re: root password prompts

2010-05-27 Thread Mike McCarty
Patrick O'Callaghan wrote: On Wed, 2010-05-26 at 14:48 -0500, Mike McCarty wrote: AFAIK this is a function of 'sudo'. It asks you the first time and remembers for a few minutes after. I've never seen this behaviour other than with sudo. Umm, perhaps you mean su. The sudo command does not

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 11:47 AM, Mike McCarty wrote: Patrick O'Callaghan wrote: IOW it remembers it by logging it. How else would it do it except by recording it in a file? I'm not interested in argumentation. It does not remember passwords, period. I am not sure how you can declare

Re: root password prompts

2010-05-27 Thread Mike McCarty
Rahul Sundaram wrote: On 05/27/2010 11:47 AM, Mike McCarty wrote: Patrick O'Callaghan wrote: IOW it remembers it by logging it. How else would it do it except by recording it in a file? I'm not interested in argumentation. It does not remember passwords, period. I am not

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 12:09 AM, Tom Horsley wrote: I have seen claims on this list that the root password is remembered for a small amount of time so you don't keep getting asked. That has never worked for me, but I assumed it was just because I was running a non-standard session and was missing

Re: root password prompts

2010-05-27 Thread Mike McCarty
Rahul Sundaram wrote: I'd appreciate it if you wouldn't CC me. On 05/27/2010 12:57 PM, Mike McCarty wrote: All programs which prompt for, and receive, passwords in clear text form go to extra lengths to make sure that they do NOT remember passwords in any form Mike, Refer to the

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 02:42 PM, Mike McCarty wrote: I'm aware of that information. Well, it seems that I was not clear enough in my statement. There is no lack of clarity. When people refer to sudo remembering passwords, they are certainly referring to the functionality and not the

Re: root password prompts

2010-05-27 Thread Mike McCarty
Mike McCarty wrote: [...] $ sudo ls -l /var/run/sudo/jmccarty total 8 -rw--- 1 root root 0 May 14 12:47 13 -rw--- 1 root root 0 Apr 23 03:23 18 -rw--- 1 root root 0 May 21 16:03 24 -rw--- 1 root root 0 May 26 15:07 33 -rw--- 1 root root 0 May 27 02:55 36

Re: root password prompts

2010-05-27 Thread Andrew Parker
On Thu, May 27, 2010 at 5:19 AM, Rahul Sundaram methe...@gmail.com wrote: On 05/27/2010 02:42 PM, Mike McCarty wrote: I'm aware of that information. Well, it seems that I was not clear enough in my statement. There is no lack of clarity.   When people refer to sudo remembering passwords,

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 03:30 PM, Andrew Parker wrote: I disagree. Nit picking details in this industry is essential for progress and understanding. Defending flawed terminology that imply security holes when they don't exist is foolish. I would like to thank Mike for his explanations, I for one have

Re: root password prompts

2010-05-27 Thread Tim Waugh
On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: Today I was running system-config-printer to install all the various printers around here at work on a freshly installed fedora 13 system running as a brand new user in a standard gnome session. As with other PolicyKit-enabled

Re: root password prompts

2010-05-27 Thread Patrick O'Callaghan
On Thu, 2010-05-27 at 01:17 -0500, Mike McCarty wrote: No, I mean sudo. In the default config it prompts for the user's password. But the OP asked about root password, not the user's password. And I replied in order to help him with his underlying need, which is not to know the root

Re: root password prompts

2010-05-27 Thread Patrick O'Callaghan
On Thu, 2010-05-27 at 02:27 -0500, Mike McCarty wrote: The fellow I responded to is contributing to a thread which concerns precise differences between how different tools handle security. He already wrote one inaccurate statement, from which I infer that he is not writing very clearly, and

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: I have seen claims on this list that the root password is remembered for a small amount of time so you don't keep getting asked. That has never worked for me, but I assumed it was just because I was running a non-standard session and was

Re: root password prompts

2010-05-26 Thread Mike McCarty
Patrick O'Callaghan wrote: On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: [...] Where is this mythical setting to make it remember the password? AFAIK this is a function of 'sudo'. It asks you the first time and remembers for a few minutes after. I've never seen this behaviour

Re: root password prompts

2010-05-26 Thread Mike McCarty
Mike McCarty wrote: Patrick O'Callaghan wrote: On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: [...] Where is this mythical setting to make it remember the password? AFAIK this is a function of 'sudo'. It asks you the first time and remembers for a few minutes after. I've never

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
On Wed, 2010-05-26 at 14:48 -0500, Mike McCarty wrote: AFAIK this is a function of 'sudo'. It asks you the first time and remembers for a few minutes after. I've never seen this behaviour other than with sudo. Umm, perhaps you mean su. The sudo command does not prompt for the root

Re: root password prompts

2010-05-26 Thread Genes MailLists
and makes a new entry. IOW it remembers it by logging it. How else would it do it except by recording it in a file? poc It is an suid program - it doesn't need a password unless the policy chooses to ask for one. -- users mailing list users@lists.fedoraproject.org To unsubscribe or

Re: root password prompts

2010-05-26 Thread Tom H
On Wed, May 26, 2010 at 2:39 PM, Tom Horsley horsley1...@gmail.com wrote: I have seen claims on this list that the root password is remembered for a small amount of time so you don't keep getting asked. That has never worked for me, but I assumed it was just because I was running a

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
On Wed, 2010-05-26 at 16:59 -0400, Genes MailLists wrote: and makes a new entry. IOW it remembers it by logging it. How else would it do it except by recording it in a file? poc It is an suid program - it doesn't need a password unless the policy chooses to ask for one.

Re: root password prompts

2010-05-26 Thread Suvayu Ali
On Wednesday 26 May 2010 02:27 PM, Tom H wrote: On Wed, May 26, 2010 at 2:39 PM, Tom Horsleyhorsley1...@gmail.com wrote: I have seen claims on this list that the root password is remembered for a small amount of time so you don't keep getting asked. That has never worked for me, but I assumed

Re: root password prompts

2010-05-26 Thread Tom Horsley
On Wed, 26 May 2010 15:17:41 -0700 Suvayu Ali wrote: In short you are better off configuring sudo and calling system-config-printer from the terminal like this, $ sudo system-config-printer Yes, running this stuff as root usually works (except for the brief period of time where the code

Re: root password prompts

2010-05-26 Thread Genes MailLists
On 05/26/2010 06:17 PM, Suvayu Ali wrote: In short you are better off configuring sudo and calling system-config-printer from the terminal like this, $ sudo system-config-printer Sort of begs the question why the GUI does not use sudo ... let the gui do what it does best .. goo-eee ..

Re: root password prompts

2010-05-26 Thread Tom H
On Wed, May 26, 2010 at 6:17 PM, Suvayu Ali fatkasuvayu+li...@gmail.com wrote: On Wednesday 26 May 2010 02:27 PM, Tom H wrote: On Wed, May 26, 2010 at 2:39 PM, Tom Horsleyhorsley1...@gmail.com  wrote: I have seen claims on this list that the root password is remembered for a small amount of

Re: root password prompts

2010-05-26 Thread Suvayu Ali
On Wednesday 26 May 2010 05:56 PM, Tom H wrote: On Wed, May 26, 2010 at 6:17 PM, Suvayu Alifatkasuvayu+li...@gmail.com wrote: I believe what the OP is asking is the gui utility that remembers the authentication after a user enters the root password after the prompt by a gui dialogue.

Re: root password prompts

2010-05-26 Thread Suvayu Ali
On Wednesday 26 May 2010 10:41 PM, Suvayu Ali wrote: On Wednesday 26 May 2010 05:56 PM, Tom H wrote: On Wed, May 26, 2010 at 6:17 PM, Suvayu Alifatkasuvayu+li...@gmail.com wrote: I believe what the OP is asking is the gui utility that remembers the authentication after a user enters the root