Accounts set-up in Linux Root Vs User

Discussion in 'Linux, BSD and Other OS's' started by sabashuali, Jun 9, 2006.

  1. sabashuali

    sabashuali Ani Ma'amin

    Likes Received:
    6
    Trophy Points:
    38
    Hi

    In an ideal linux set-up is the user supposed to do the system updates or is it reserved to the root account? If neither, is one supposed to set-up another account for system admin?

    Thanks...

    [ot]COME ON ENGLAND!!![/ot]
     
  2. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    In (K)ubuntu I get notified of new updates, but to view them and install them I have to sudo into root user

    [ot] What about Israel? :p [/ot]
     
  3. sabashuali

    sabashuali Ani Ma'amin

    Likes Received:
    6
    Trophy Points:
    38
    Thanks,

    But if I remember rightly, when I try, for example, to go into adept from the user account, I am asked for a password. I try both the user's and the root's but they are not accepted? I think maybe I have set-up something wrong.... :eek:

    [ot]Did not qualify....:( [/ot]
     
  4. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    When updates are available, a little icon will show in the taskbar. Click it once and you will be asked for the root password (or your username password depending on how you have set up sudo).
     
  5. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    In my systems, I delegate the ability to update the system via a preconfigured script to a certain user or group of users. That way, rather than just handing out sudo rights like candy, I give only the ability to update the system via the package manager. You can delegate sudo rights via the visudo tool as root. I can post my update file and my sudoers also if it will help anyone.
     
  6. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    Yeah i wouldn't mind having a quick look at your sudoers file.

    This is slightly offtopic. I reinstalled Kubuntu earlier but kept my /home partition intact. I noticed that the user group is different for my old files and the new files that were installed. The old files user group is 'users' whereas my new files user group is 'megamaced'.

    Can you explain why my username is also my usergroup? I though i was part of the users list?
     
  7. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    On most configurations, your primary group is your own personal group, and you may belong to 'users' and perhaps others as secondary groups.

    Here is the sudoers file on my workstation:
    Code:
    #
    # This file MUST be edited with the 'visudo' command as root.
    #
    # See the sudoers man page for the details on how to write a sudoers file.
    #
    
    # Host alias specification
    
    # User alias specification
    
    # Cmnd alias specification
    
    # Defaults specification
    
    # Runas alias specification
    
    # User privilege specification
    root    ALL=(ALL) ALL
    
    chris   ALL=/usr/local/sbin/mu
    chris   ALL=/sbin/halt
    chris   ALL=/sbin/reboot
    chris   ALL=/usr/local/bin/desklog
    chris   ALL=/usr/local/bin/kill-desklog
    chris   ALL=/usr/local/bin/crystal-kmenu
    chris   ALL=/usr/local/bin/outline-kmenu
    
     
  8. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    So theres no real difference between user group 'megamaced' and 'users'?

    What would I have to change in my sudoers file to allow only user 'megamaced' sudo access?

    Code:
    # /etc/sudoers
    #
    # This file MUST be edited with the 'visudo' command as root.
    #
    # See the man page for details on how to write a sudoers file.
    # Host alias specification
    
    # User alias specification
    
    # Cmnd alias specification
    
    # Defaults
    
    Defaults        !lecture,tty_tickets,!fqdn,rootpw
    
    # User privilege specification
    root    ALL=(ALL) ALL
    
    # Members of the admin group may gain root privileges
    %admin ALL=(ALL) ALL
     
  9. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Exactly, it's all about the system policies you have setup, not the name of the group. You're starting to undestand how flexible *nix can be. :)
    Code:
    # /etc/sudoers
    #
    # This file MUST be edited with the 'visudo' command as root.
    #
    # See the man page for details on how to write a sudoers file.
    # Host alias specification
    
    # User alias specification
    
    # Cmnd alias specification
    
    # Defaults
    
    Defaults        !lecture,tty_tickets,!fqdn,rootpw
    
    # User privilege specification
    root    ALL=(ALL) ALL
    
    [COLOR="Red"]# megamaced is the only user with sudo to everything
    megamaced ALL=(ALL) ALL[/COLOR]
    P.S. - Only edit the sudo file with the visudo command, never edit /etc/sudoers directly or you can render your system quite broken if you make a mistake. (You'd have to boot to a live disc and fix your /etc/sudoers if it was broken badly enough).
     
  10. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    I didn't know about the visudo command until now so thanks for the info.

    I've come across the sudoers file before, when I changed the sudo command to ask for the root password, instead of my user account password. Bloody Ubuntu's default policy :x:

    While we are on the subject of sudo. Ubuntu has a policy where the root password only needs to be entered once every 15 minutes. How can I change this so that I have to enter the root password everytime I perform an administrative task?

    ps. Kubuntu asks for a root password everytime, so it's only Ubuntu that doesn't
     
  11. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Just comment out that "Defaults" Line:
    Code:
    #Defaults        !lecture,tty_tickets,!fqdn,rootpw
     

Share This Page