Hot answers tagged

3

A potential intruder could reboot into single user mode if they had physical access. Physical security is just as important as software security. That is why schools lock out USB drives and the BIOS. You have to lock it down. In /etc/default/grub you can uncomment the following line GRUB_DISABLE_RECOVERY="true" And poof! Single User mode is now gone.


3

Several reasons: one, you have to have physical access to the servers, and most employees don't want to lose their jobs by getting caught on CCTV video breaking into systems. Then, you have some companies that implement BIOS / boot passwords or boot loader passwords. Sometimes, the "single user" option requires a password (if set up properly ahead of time), ...


2

Executive summary: "root" is the actual name of the administrator account. "sudo" is a command which allows ordinary users to perform administrative tasks. "Sudo" is not a user. Long answer: "root" (aka "superuser") is the name of the system administrator account. The origins of the name are a little archaic, but that doesn't matter. Root user has user ...


2

In order to prevent root or any one from being able to read your files, you need to encrypt them. File Encryption is a very convenient option to look into if you wish to avoid having to deal with complex file system manipulations. Encryption Options: Encrypt ordinary files and prevent everyone but yourself from being able to view them Encrypt Shell ...


2

As root edit /etc/sudoers and place the following line: youruser ALL=(ALL) NOPASSWD:ALL after # Allow members of group sudo to execute any command %sudo ALL=(ALL:ALL) ALL In this way you will be capable to execute all commands that require sudo privileges passwordless. In order to use sudo and be prompted for a password you need to remove ...


1

Yes, doing it as the root user would allow you to change the permissions on (and owner of) these files and directories. $ cd /backup/dir/somewhere $ sudo chown myname:mygroup myfile $ sudo chmod u+rw myfile ... where myname and mygroup is your username and default group (check you other files in your home directory or use id -n -u (for username) and id -n ...


1

In RedHat 6 there is an upstart script /etc/init/serial.conf that will ensure the console is designated a secure terminal before starting the getty process, and so ensuring root can login on the console. You may be better off setting the root password to something unknown, thus forcing people to always login as a non-root user and then using sudo to switch ...


1

The simple but accurate explanation is that the vendors of iOS and Android don't want the end-user to have full control over the operating system, whereas the vendors of Unix systems do. It's a design decision by the device vendor. It is technically possible to have iOS or Android systems where the end-user has full control. There is no such iOS-based ...


1

Based on the comment string, it sounds like you don't want to see the \W directory element in the PS1 prompt string (explained here in the bash manual). For your user (mayur) and/or root accounts, edit their .profile or .bashrc (wherever you found the PS1 setting already), and simply remove the \W portion of it, to make it something like: PS1='[\u@\h]\$ ' ...



Only top voted, non community-wiki answers of a minimum length are eligible