Hot answers tagged

4

PermitRootLogin No doesn't prevent root logins entirely, it only prevents root logins through ssh. Enabling this option prevents a class of brute force attacks where an attacker tries to ssh root@server with some common passwords (including an empty password, which can work if PermitEmptyPasswords is enabled). The point of refusing remote root logins is that ...


2

Windows and Linux don't manage administration privileges in the same way. In Windows, system administration tasks can only be performed by processes running at a high privilege level. Normal processes run at a normal privilege level. A user can run a process at high privilege level if their account is marked as administrator; normally, they need to re-enter ...


1

In your program, you probably overlooked making the real and effective uid set to the same value. Gids also should match root's gid. Something like this: setuid(geteuid()); setgid(getegid()); See for example sue (a simple setuid/setgid wrapper).


1

The outputs of du and df don't line up in terms of used disk; search for deleted files that are being written to. Stop (restart) the process writing to the file(s), or reboot the box. lsof | awk '/deleted/ && $5 ~ /w/' Implement log rotation and find out why the log keeps growing at that tremendous rate (and rectify the root cause).


1

You need to add yourself to the wheel group: sudo usermod -a -G wheel $LOGNAME Then GUI would ask for your password, not the root's one.


1

If you are getting the permission and other details for gvfs as per the following d?????????? ? ? ? ? ? gvfs then just unmount your gvfs using the following command. Your issue will get resolve after following this process. umount ~/gvfs(umount /run/user/112/gvfs in my case). GVFS (GNOME Virtual File System) is the virtual file ...


1

I would not recommend disabling the root account by blanking the root password. This will create implication for the user when working in GUI. E.g. YaST requires specifically the root password. As sudo is not a program and a built-in command, it cannot be invoked by GUI. You will then have to invoke YaST from CLI using sudo to be able to make any changes. ...


1

From your follow-up comments, it becomes clear that what you're really after is a way to recover your root password. This is easy: Reboot your system. When you see the grub menu, hit 'e' to get an editor. in the editor, find the line that starts with linux at the end of that line, add init=/bin/bash. hit ctrl+x to boot the system once with this modified ...


1

Don't put the private keys on the system. Users could use, e.g., SSH Agent forwarding and keep the keys on their workstations. Or use a hardware security module (HSM) such as a smartcard (where the hardware refuses to allow you to copy the keys). These both prevent anything on the system (including root) from copying the keys, but root may be able to use ...


1

root (hd0,0) - Configures the root partition for GRUB, such as (hd0,0) first hard disk, first Partition and mounts the partition. kernel /vmlinuz-i686-up-4GB root=/dev/hda9 - Specifies the kernel location which is inside the /boot folder. This location is related to the root(hd0,0) statement.The root partition is specified according to the Linux ...



Only top voted, non community-wiki answers of a minimum length are eligible