Tagged Questions
3
votes
1answer
73 views
How does having /dev/fd make running shell scripts under sudo safe?
At the end of the man page for sudo, there's the following remark:
Running shell scripts via sudo can expose the same kernel bugs that
make setuid shell scripts unsafe on some operating systems ...
5
votes
1answer
176 views
Ubuntu: If anyone can get a root prompt without password, isn't that compromising the gnome keyring?
I've been looking for this for quite a while now but couldn't find a satisfying answer.
My scenario:
I'm using encfs to encrypt a few directories in my home folder. To make it easier to access I set ...
1
vote
1answer
106 views
Setting the root password vs. sudo -i
Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize):
sudo -i eliminates the need for a password. Isn't that a problem for ...
1
vote
3answers
131 views
Can a mounted encrypted filesystem be safe from root?
I have access to a shared remote computer from which I would like to run some code I have written which uses an interpreter (not a compiled code). I would like to protect this source code from other ...
5
votes
3answers
181 views
Are sudo and gksudo safe?
I noticed after running a sudo command in terminal or running a administrative application that uses gksudo, it won't ask again for the password for a time (something like 5 minutes).
Now let's ...
3
votes
1answer
151 views
Why is it a bad idea to run as root? [duplicate]
Possible Duplicate:
Concern about logging in as root overrated?
I often hear that it's a bad idea to use root for general use.
Why is this a bad idea?
2
votes
1answer
127 views
Can I lock the root account during an install of Debian GNU/Linux 6 “squeeze”?
By default, Ubuntu locks account root; can I do the same, in Debian GNU/Linux 6 "squeeze", during install?
9
votes
3answers
736 views
Is it safe to close shell just by clicking “X” or using “ctrl+d”?
Is it safe to close shell just by clicking "X" or using "ctrl+d" while logged in as root with su or is it safer to close it by typing "exit"? Is there any difference (security-wise) at all or is it ...
6
votes
1answer
497 views
Jailbreaking HDTV
I have a Vizio internet TV, the predecessor to this one with basically the same specs, not 3D though. I wanted to try and gain root access to the tv.
Using nmap I leaned that the only port open is ...
2
votes
2answers
125 views
Is it possible (and a good idea) to do `pw lock root` on FreeBSD?
I have set up sudo on my FreeBSD server. As I now never want to log in as root anymore, I was wondering whether I should do sudo pw lock root.
My questions are:
Is this possible, without forever ...
4
votes
4answers
731 views
How sudo/root-ness detection works
Programs that make changes system-wide require sudo unless I am already the root user.
Now, the question is: how exactly does the system figure out that I am (not) root?
Does it:
Check to see if ...
12
votes
1answer
3k views
Why are the first 1024 ports restricted to the root user only?
This is more idle curiosity than anything else. A friend of mine asked me 'which port range is it that only root can use under Linux?' I told him 0-1024 were restricted. Then he asked my why it was so ...
3
votes
5answers
286 views
Any program like `sudo` to gain root by having two users enter a password?
I run a server which is used by a group of individuals for e-mail, mailing lists, personal web homes etc.
I thought about ways to provide root access for other members to allow them handling problems ...
5
votes
2answers
478 views
make a 2nd root?
I was thinking, maybe i'd like to disable passwords for the root user and only use keys to log in. and if i need to login without keys have a 2nd user that is like root in everyway except has a ...
3
votes
2answers
268 views
Recommended way to login to root?
After I found out hundreds of hacking attempts are made in a day I decided I want to disable logging in to root remotely via a password. But then I found I can't switch users in WinSCP so I can't ...
4
votes
2answers
3k views
How do I disable remote root login via ssh?
How do i disable remote root login via ssh?
I want to log into my server (i use keys on my main comp) then su into root instead of access root directly.
I am using debian. I follow guides online ...
2
votes
3answers
626 views
Is there any chance that some of these processes are malicious?
My significant other and I are sometimes paranoid that a foreign government usually associated with last year's Gmail security breach may be attempting to gain access to our computers.
There were a ...
16
votes
3answers
744 views
Is it secure to leave a root shell running in detached screen session?
I'm curious about the security of leaving a root shell running inside a detached screen session. I typically never do this.
Aside from the potential of my non-root user account being compromised ...
5
votes
2answers
2k views
Write to a file without redirection?
I am writing a regular compiled application that needs to create a special file and write a magic cookie into it. I can’t write the file directly from the application, the system security model ...
10
votes
11answers
903 views
Concern about logging in as root overrated?
For personal linux on my personal notebooks, I've usually set my environment to autologin as root even under X or lower runlevels. I've found my workflow is very pleasant and fast, without any ...
