Re: sudo questions

2013-08-20 Thread berenger . morel
Le 19.08.2013 14:22, Ralf Mardorf a écrit : For other tastes, there are other good distros too. Bad distros among the well known IMO are only those, that don't have a community, such as e.g. Mint. Mint might be ok, but when those people run into issues, they ask at Debian and Ubuntu lists. Re

Re: sudo questions

2013-08-20 Thread Zenaan Harkness
On 8/20/13, Chris Bannister wrote: > On Mon, Aug 19, 2013 at 11:12:15AM +1000, Zenaan Harkness wrote: >> On a more hair splitting note, we could say it is Universal, at the >> price of being a little more generic sometimes than it could otherwise >> be. > > If you are going to split hairs. :) I'd

Re: sudo questions

2013-08-19 Thread Ralf Mardorf
On Mon, 2013-08-19 at 11:12 +1000, Zenaan Harkness wrote: > On 8/19/13, Bob Proulx wrote: > > I know you would like the installer to do exactly what your custom > > strategy is for your system. But that is difficult. There are many > > custom strategies. > > Debian IS! THE! Universal! Operating

Re: sudo questions

2013-08-18 Thread Zenaan Harkness
On 8/19/13, Bob Proulx wrote: > Joel Rees wrote: >> Maybe I need to file a feature request (for my own satisfaction, even >> if it gets rejected). >> >> What I lean towards is providing the installing user >> (1) the opportunity to set the root password, >> (2) the opportunity to set a separate ad

Re: sudo questions

2013-08-18 Thread Bob Proulx
Joel Rees wrote: > Maybe I need to file a feature request (for my own satisfaction, even > if it gets rejected). > > What I lean towards is providing the installing user > (1) the opportunity to set the root password, > (2) the opportunity to set a separate admin account and password > (member of

Re: sudo questions

2013-08-18 Thread Joel Rees
On Sun, Aug 18, 2013 at 7:32 PM, Brian wrote: > On Sun 18 Aug 2013 at 06:51:04 +0900, Joel Rees wrote: > >> On Sun, Aug 18, 2013 at 4:03 AM, Brian wrote: >> > On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: >> > >> >> But debian's installer tries to encourage the user to not enable root, >

Re: sudo questions

2013-08-18 Thread Ralf Mardorf
On Sun, 2013-08-18 at 21:40 +1000, Zenaan Harkness wrote: > On 8/18/13, Chris Bannister wrote: > > On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: > >> On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: > >> > On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: > >>

Re: sudo questions

2013-08-18 Thread Zenaan Harkness
On 8/18/13, Chris Bannister wrote: > On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: >> On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: >> > On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: >> >> > > > [snip] >> > > too long, didn't read >> > >> > IOW, tl;dr >

Re: sudo questions

2013-08-18 Thread Chris Bannister
On Sun, Aug 18, 2013 at 12:17:46PM +0200, Ralf Mardorf wrote: > On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: > > On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: > > > > > [snip] > > > too long, didn't read > > > > IOW, tl;dr > > In my opinion it won't add more sane s

Re: sudo questions

2013-08-18 Thread Brian
On Sun 18 Aug 2013 at 06:51:04 +0900, Joel Rees wrote: > On Sun, Aug 18, 2013 at 4:03 AM, Brian wrote: > > On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: > > > >> But debian's installer tries to encourage the user to not enable root, > > > > No, it doesn't. > > Perhaps you would rather I

Re: sudo questions

2013-08-18 Thread Ralf Mardorf
On Sun, 2013-08-18 at 21:33 +1200, Chris Bannister wrote: > On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: > > On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: > > > johndoe sounds like a great name for an admin account. > > > > There's a Debian BSD port ;), so how about "Charlie

Re: sudo questions

2013-08-18 Thread Chris Bannister
On Sat, Aug 17, 2013 at 09:25:23PM +0200, Ralf Mardorf wrote: > On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: > > johndoe sounds like a great name for an admin account. > > There's a Debian BSD port ;), so how about "Charlie Root"? > > > [snip] > too long, didn't read IOW, tl;dr -- "If

Re: sudo questions

2013-08-17 Thread Joel Rees
On Sun, Aug 18, 2013 at 4:03 AM, Brian wrote: > On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: > >> But debian's installer tries to encourage the user to not enable root, > > No, it doesn't. Perhaps you would rather I said something like, it gives the option to establish an initial accoun

Re: sudo questions

2013-08-17 Thread Ralf Mardorf
On Sun, 2013-08-18 at 03:12 +0900, Joel Rees wrote: > johndoe sounds like a great name for an admin account. There's a Debian BSD port ;), so how about "Charlie Root"? > [snip] too long, didn't read -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscri

Re: sudo questions

2013-08-17 Thread Brian
On Sun 18 Aug 2013 at 03:12:39 +0900, Joel Rees wrote: > But debian's installer tries to encourage the user to not enable root, No, it doesn't. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archiv

Re: sudo questions

2013-08-17 Thread Joel Rees
In case you're still confused, I'll try a little more direct response. (Lots of informative responses in this thread, but I feel a blog coming on. The rant I wrote on this a long time ago needs updating.) On Wed, Aug 14, 2013 at 7:14 PM, François Patte wrote: > Bonjour, > > For some unknown reaso

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 17:50, Jerry Stuckle a écrit : On 8/16/2013 11:08 AM, berenger.mo...@neutralite.org wrote: Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password,

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 17:43, Ralf Mardorf a écrit : On Fri, 2013-08-16 at 17:08 +0200, berenger.mo...@neutralite.org wrote: Why would it be worse than a shared admin account? For the shared account, I can easily understand why it's not something to do, but I can not see the problem with multiple "ro

Re: sudo questions

2013-08-16 Thread Jerry Stuckle
On 8/16/2013 11:08 AM, berenger.mo...@neutralite.org wrote: Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root

Re: sudo questions

2013-08-16 Thread Ralf Mardorf
On Fri, 2013-08-16 at 17:08 +0200, berenger.mo...@neutralite.org wrote: > Why would it be worse than a shared admin account? For the shared > account, I can easily understand why it's not something to do, but I can > not see the problem with multiple "root" accounts? > (I did not said that the ad

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 16.08.2013 16:03, Jerry Stuckle a écrit : On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be changed

Re: sudo questions

2013-08-16 Thread Jerry Stuckle
On 8/16/2013 8:31 AM, berenger.mo...@neutralite.org wrote: Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be changed if they are to be blocked, which means communica

Re: sudo questions

2013-08-16 Thread berenger . morel
Le 15.08.2013 04:11, Richard Hector a écrit : By using su, with root's password, that means everyone who has root has full root and knows the same password, so that will have to be changed if they are to be blocked, which means communicating the new password to all the required users. I apol

Re: sudo questions

2013-08-14 Thread Richard Hector
On 15/08/13 01:30, François Patte wrote: > I think that sudo system is less secure than the old system "root account". > > 1) Anybody with sudo root permission (as it is the case for the first > person using sudo after an installation) can do "sudo bash" and he can > run as many commands as he wan

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
An advantage of sudo: [rocketmouse@archlinux ~]$ su -c mcedit /etc/fstab su: user /etc/fstab does not exist [rocketmouse@archlinux ~]$ su -c "mcedit /etc/fstab" Password: [rocketmouse@archlinux ~]$ sudo mcedit /etc/fstab [sudo] password for rocketmouse: If you work much with command line as use

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 20:03 +0100, Joe wrote: > it has the sudo advantages [snip] of being required for each command. That's not true and it would be a disadvantage. [rocketmouse@archlinux ~]$ su Password: [root@archlinux rocketmouse]# exit [rocketmouse@archlinux ~]$ sudo -i [sudo] password for

Re: sudo questions

2013-08-14 Thread Bob Proulx
Jerry Stuckle wrote: > Darac Marjal wrote: > > I believe the idea is to discourage people from logging in as root. I think it is more one of trying to simplify things for the non-technical user. Having non-technical users deal with one password is hard. Having non-technical users deal with two p

Re: sudo questions

2013-08-14 Thread Joe
On Wed, 14 Aug 2013 12:21:43 -0400 Jerry Stuckle wrote: > On 8/14/2013 12:04 PM, Ralf Mardorf wrote: > > On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: > >> However, when I use su, I need to key in the root password before > >> doing anything. This adds another layer of security to the

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 10:40 AM, Lars Noodén wrote: On 14.08.2013 17:36, Jerry Stuckle wrote: I agree in principle that sudo is better then su. The problem I have with it is security; when you use sudo you type in your own password. So if your password is compromised, the hacker can do anything the sudo

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 12:04 PM, Ralf Mardorf wrote: On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: However, when I use su, I need to key in the root password before doing anything. This adds another layer of security to the system. He? Than configure sudo to ask for the password too. [rocke

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 10:36 -0400, Jerry Stuckle wrote: > However, when I use su, I need to key in the root password before > doing anything. This adds another layer of security to the system. He? Than configure sudo to ask for the password too. [rocketmouse@archlinux ~]$ sudo mcedit [sudo] pas

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
root usually does connect to the Internet too, e.g. to run apt, ntp, etc. pp., even the internet connection for the user has to be established by root, maybe not by a human being, but at least e.g. on startup automatically. You don't have to give a user special permissions, it's the admin's task t

Re: sudo questions

2013-08-14 Thread Lars Noodén
On 14.08.2013 17:36, Jerry Stuckle wrote: > I agree in principle that sudo is better then su. The problem I have > with it is security; when you use sudo you type in your own password. So > if your password is compromised, the hacker can do anything the sudo > user can do - which may be very bad.

Re: sudo questions

2013-08-14 Thread Jerry Stuckle
On 8/14/2013 8:44 AM, Darac Marjal wrote: I believe the idea is to discourage people from logging in as root. You can't get rid of root completely (any user with an ID of 0 is root), nor would you want to. But there have been many a horror story of people logging in as a super-user (either Root

Re: sudo questions

2013-08-14 Thread Jerome BENOIT
Hello, On 14/08/13 15:30, François Patte wrote: > Moeover, by default on my debian install, I could see that root login > through ssh is allowed: is it really the default configuration? > Yeap ! For details, read the subsection `PermitRootLogin set to yes' in the first section of /usr/share/

Re: sudo questions

2013-08-14 Thread François Patte
Le 14/08/2013 14:44, Darac Marjal a écrit : > On Wed, Aug 14, 2013 at 12:14:47PM +0200, François Patte wrote: >> Bonjour, >> >> For some unknown reason I did not activate the root account during the >> installation. I activated it from a user account, say John Doe. >> >> Now John Doe can become roo

Re: sudo questions

2013-08-14 Thread Darac Marjal
On Wed, Aug 14, 2013 at 12:14:47PM +0200, François Patte wrote: > Bonjour, > > For some unknown reason I did not activate the root account during the > installation. I activated it from a user account, say John Doe. > > Now John Doe can become root anytime and do anything on my machine. > > How

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
On Wed, 2013-08-14 at 12:49 +0200, Ralf Mardorf wrote: > You can set up a root account, but you anyway shouldn't run X sessions > as root. The Debian on my machine and all Debian installs I ever used > had a root account by default, but sudo wasn't enabled. Oops, pushed the wrong button, I wanted

Re: sudo questions

2013-08-14 Thread Ralf Mardorf
You can set up a root account, but you anyway shouldn't run X sessions as root. The Debian on my machine and all Debian installs I ever used had a root account by default, but sudo wasn't enabled. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe".