[BL] BL3 as 'user' D

sindi keesan keesan at sdf.lonestar.org
Sat Jan 20 17:53:45 EST 2007


On Sat, 20 Jan 2007, Karolis Lyvens wrote:

> On Sat, Jan 20, 2007 at 06:33:17PM +0000, sindi keesan wrote:
>>> It would work, but it will run these programs with essentially root
>>> privileges meaning that it wouldn't be very sensible in multi-user setup
>>> (in security sense). I don't think that BL was designed for security
>>> (it runs as root as default) so it wouldn't be a big issue.
>>
>> Should I instead chmod +x, or u+x?  (I don't think that worked).
>
> To set set-user-id permission?
>
> ----
> chmod +s

Wasn't I just told this was not secure, to run with root privileges?
But it can't be less secure than actually being root.

> ----
>
> For dialling (as i figured out in last five minutes so it may be
> inaccurate, but still worth trying):
>
> ----
> cd /usr/sbin
> chmod 4755 ppp-on ppp-off pppd
> chmod 7755 /usr/bin/eznet
> chown -R user's_name:user's_group /var/eznet
> ----

I did not need to chown to dial with eznet.  I think I did chmod +s.  Is 
chmod 7755 better?  I will experiment and see what they do.

>> I need the following to be 'user'-usable:
>
> And they aren't currently "user-usable"? Ie, only "root-usable"?

Some have all been changed from the original.


>> lpr already works for 'user' but not 'root'
>
> Hmm. Try the following for lpr (more tinkering with permissions):
>
> ----
> chown user's_name:user's group `which lpr`
> chmod 4755 `which lpr`


How specifically would I change this to work with root?
chown root:root  ?

I should do some reading on this subject.
I do have user dialing and using X now even if it is not the best way to 
do it.

> ----
>
>> The user would be instructed to type user and then Enter instead of
>> pressing Enter.  In rc.d?
>
> Standard intro-screen is located at /etc/issue (and called at the end of
> /etc/rc)

Thanks.  We lost power due to ice coating the electric lines today but it 
is back now and I will do some experiments.

>
> Karolis
>
> -----------------------
> BasicLinux mailing list
> -----------------------
> http://www.basiclinux.com.ru
> http://www.ibiblio.org/pub/linux/distributions/baslinux/
> ------------------------------------
> To exit, send subject=unsubscribe to
> baslinux-request at lists.ibiblio.org
>

keesan at sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



More information about the BasLinux mailing list