kanotix.com :: Thema anzeigen

kanotix.com

Software - Root user and x

nikohc - 31.08.2006, 05:39 Uhr
Titel: Root user and x

First of all a like to make my congratulation for the Kanotix distribution which is one of the best that I have tryed out.

I have just a question about a little script that I write using Kommander,
I had some trouble have it working, after some debug I found that the root user, which's the default user on my single home pc, don't have the right to access x.
The script have to start kmail, configured by root, if a port portscan is detected.
if i give the command:
~#xhost +
~#export DISPLAY=:0.0

the script start to work but the kmail session started does not have any configuration.
The only way to have the script work propely is close kde and give the
startx.
That confuse me, I was thinking kde was a x manager and I suppose x was running all the time a graphical interface was started.

bluewater - 31.08.2006, 06:52 Uhr
Titel:

Default user is ROOT?

That is not very smart

You should be set up so you have

User (example = nikohc (password is whatever))

and root (example = root (password is whatever and not the same as user password))

The only way to access root is via the console example = sux then the password for root , except if there is an absolutly dire emegency , otherwise you will probably muck up your permissions

the other way to access root is in an init (for example init 3.. to do a dist-upgrade for example (never do a dist-upgrade
in X)

as for your script,, i will leave that for someone else

schnorrer - 31.08.2006, 09:50 Uhr
Titel:

KDM is the manager for X, and kde is the gui.
X is the ServerFramework.

as long as one uses only the console and wants to write emails, use a konsole mailprogram, such as sendmail, pine or any other console-mailprogramm.

nikohc - 31.08.2006, 12:34 Uhr
Titel:

I know everybody complain when the dafault user is root.
But if you are the only user of the workstation that's not connected to any
network and there's only a dial up connection to access internet, to me is good be ROOT.

piper - 31.08.2006, 12:42 Uhr
Titel:

NEVER be root period. If you like root, stick to a windows environment.

Root is NOT good.

But it is YOUR computer. You were warned Winken

bluewater - 31.08.2006, 13:03 Uhr
Titel:

nikohc

Dont be daft (god knows i have had my share of daftness)

By conecting to the internet as root (as a user) you are conecting to a network, think about that

Connecting, as as user and doing normal everyday stuff as a user, in Linux gives you the security knowing that under normal circumstances, you will have reduced an infestation of worms , trojans, virus to virtually ummmm nothing,, rootkit stuff does exist I suggest you install rkhunter ASAP

apt-get install rkhunter

to activate
sux
opps forgot you running as root (burglars please take no notice)

to activate
rkhunter -c

piper - 31.08.2006, 13:25 Uhr
Titel:

And not only from a security level, but any changes you make can b0rk your system, possibly beyond repair. (reinstall)

nikohc - 31.08.2006, 18:51 Uhr
Titel:

Both of you just provide useless info to my question.
Just a lot of of what to or what not to do.
I guess this's free software and i feel free to do what I want whit my stuff!!!
If you don't like to provide any useful info to my question is fine to me
but don't provide also unwanted comment and this time I say PERIOD.

slam - 31.08.2006, 19:29 Uhr
Titel:

You may make use of kanotix-su or sux, both come pre-installed with kanotix - have a look at it.
Greetings,
Chris

kb0hae - 02.09.2006, 04:09 Uhr
Titel:

Hi nicohe. In the simplest terms. Being root while on the internet makes it much easier for adware, spyware, viruses, trojans, and rootkits to install themselves on your system. Being root while on the internet or not makes it easier to totally screw up your Linux install to the point where you have to re-install to recover. Why this is so is that root can install and edit files that an ordinary user can't ( and probably shouldn't) install or edit. (unless they know the root password). You can do almost anything as a user that you can do as root by using the File Manager Super User Mode, and Terminal Program Super User Mode. These make you root temporarily, and you are returned to a normal user when you are through. I hope this explanation helps you understand why it is not a good idea to be root all the time.

It is true that you can do as you wish on your own system. However, I have found that the people who answered you know what they are talking about, and to follow their advice is usually a good thing.

The choice is yours.

jackiebrown - 02.09.2006, 04:49 Uhr
Titel: Re: Root user and x

nikohc hat folgendes geschrieben::

the script start to work but the kmail session started does not have any configuration.
The only way to have the script work properly is close kde and give the
startx.
That confuse me, I was thinking kde was a x manager and I suppose x was running all the time a graphical interface was started.

Well, I don't agree either with root as default. But that said... on to your question

Were you running root the first time you set up kmail?

If you weren't then your config files are probably set up under you user directory.

Also

You can add root as a login choice.

Go to /etc/kde3/kdm and open kdmrc

change AllowRootLogin=false to true

piper - 02.09.2006, 06:08 Uhr
Titel: RE: Re: Root user and x

adware, spyware,trojans

You will not find on linux

Running root, your machine WILL be takin over by someone, That I can promise, I don't care if you use a router, you will also NOT know, if the person is good enough. If your on wireless, I feel sorry for you, as you have a greater chance of being took.

gammaray - 05.09.2006, 11:18 Uhr
Titel: X as root

piper hat folgendes geschrieben::

NEVER be root period. If you like root, stick to a windows environment.

Root is NOT good.

But it is YOUR computer. You were warned Winken

If I'm not wrong the whole X server is runing with root privileges.Default by his nature.
Wich is very bad for all linux distros Böse

The only OS without this evil habit is OpenBSD.

slh - 05.09.2006, 14:19 Uhr
Titel: RE: X as root

X doesn't need to run as root, neither on OpenBSD nor on linux - unless you want a display manager like kdm, gdm, xdm, wdm, ...

No one stops you from doing:

Code:

unfreeze-rc.d

update-rc.d -f kdm remove

update-rc.d -f xdm remove

freeze-rc.d

...logging into a text console and running 'startx', nothing but your own "lazyness" Winken

Once you run any of the aforementioned display managers on OpenBSD, X will happily run under UID 0 on OpenBSD as well, so much for usability and blame shifting.

--
And actually it drops all privileges to the user who'll log in, except the small stub needed to run the dm itself.

nikohc - 08.09.2006, 17:22 Uhr
Titel:

I take good note about the default user suggestions and I'm not logging in as root for daily use anymore.

I solve the first problem, which was having the script running from normal user, giving by konsole

"xhost local:root"

After that the kmail session still not belong from root user, because the font size and icons are different from the one that I set login as root user.
The first time I start kmail login as root.
There' s any command to have the normal user kmail started instead the root kmail as I login as normal user now?

Niko

Gowator - 09.09.2006, 11:27 Uhr
Titel:

nikohc hat folgendes geschrieben::

you can do a few things....
1) You can use kdesu on Kmail... I think this will then use the fonts etc. from the user... so test it with kdesu kmail at the cli
2) You can redirect the root mail to your user mail... (using a .forward)
3) You can set the stuff like logs to mail your user account not root account
4) Use something like sylpheed-claws for the root mail instead
5) Recursively Change the ownership on the /root/Mail directory so that it belongs to the same group as your user and then set kmail to receive the root mail as well. You can filter it into a seperate "folder"