Baslinux mailing list

[baslinux AT lists.ibiblio.org]

On Mon, 17 Mar 2008, baslinux AT lists.ibiblio.org wrote:

> I've managed to get the terminal/console programs I need to start under
> the user account as well now (while running as root). There was no need to
> write any scripts. My jwm menu entries, from which the command that will
> work from a terminal can be easily deduced, are as follows:
>
> for links;
> --------------------------------------------------------
> rxvt +sb -g 70x28 -e su user -c links-0.95 ~/hotlist.html
> ---------------------------------------------------------
>
> for naim;
> -----------------------------------------------------
> rxvt -rv +sb -g 70x28 -e su user -c 'TERM=linux naim'
> -----------------------------------------------------


Why do you want to run these programs under X instead of in console mode 
(using mc if you don't want to type out the program name, maybe with 
scripts for all the console programs you will be using as user in one 
directory or at least symlinked to that directory)?  You could make 
everything in there accessible by user.

su user
cd /directory-with-programs
mc
select program of interest (does mc also support gpm mouse?)

This is only for non-X programs.  I inserted any required modules (slhc, 
parport) in rc.  You can also start pcmcia in rc.

My beginners are able to log in as user then type startx and use the jwm 
or icewm menu.  I started X with an rxvt containing some hints, such as 
how to dial and hang up the modem, and 'exit' and 'reboot'.  Typing 'm' 
brings back the menu. Scripts 'dial' and 'hangup', for those who prefer 
typing to clicking.

> Note that the added -rv option for naim is for reverse video, which gives
> a white on black terminal that resolves the worst of the color problems
> naim has with rxvt.
>
> What I've mapped out with these su steps might be the simplest solution
> for adding unpriviledged users to a BL3 system, don't you think, Sindi?

I avoid X when there is any other solution.  It is resource intensive.
People usually just want to use a browser.  I don't know if anyone 
actually used lynx or links but I showed them how.

> It's sort of a half-measure, of course, since users can still easily get
> access to root priviledges (for example, by going to a vt). But it might
> work well for alot of the scenarios you face as you set up computers for
> less technically-adept folks. Under the routine I've come up with, xvesa
> and all programs--except those that have jwm menu items created for them
> that su to the other account--run as root. But, on the assumption that
> non-tech people will be disinclined to fiddle with config files, it may be
> a good way to cause important parts of the system to run without root
> priviledges. You could make just about everything in the jwm menu su to
> user before running, but leave those things that require root priviledges
> (like the dialer) as things that still get run by root. Anyway, seems like
> an idea worth considering. Definitely seems like the solution to my needs
> regarding the laptop I plan to set up.
>
> Btw, you said something about removing from /etc/profile the line that
> says export HOME=/root, Sindi. What exactly does that line do? What effect

Files were getting saved to root instead of user directory, I think. 
Karolis figured this out.  Without that line, I think they still are saved 
to /root if you are root.  Steven did it this way in the no-password 
setup.  Check the archives for HOME=/root and you will find the TAG 
discussion (381K of data), which is mostly about running a user vs root, 
and security issues.  Karolis says that passwd.tgz should have commented 
out that line when it was installed but there is a bug in it.

I also summarized running BL3 as 'user' in December 2007: 
https://lists.ibiblio.org/sympa/arc/baslinux/2007-December/014459.html is 
part of this thread.

If I missed something, please add it to this thread and maybe even post it 
at your site.

> will removing it have on the system? Will removing, for example, cause
> Opera to not try to download things to /root? Will it cause links and naim
> to look in the user's home directory for config files rather than looking
> for them in /root?

Probably.

> Looks like I'm close to achieving what I'd like to do with BL3. It may
> work well on the laptop I intend to set up once I've made these
> modifications.
>
> James