General :: Restrict Root To SU To Normal User
Mar 11, 2010Is there way we can restrict root to su to normal user. Or at least a way to prompt for the password when root tries to su <username>.
View 3 RepliesIs there way we can restrict root to su to normal user. Or at least a way to prompt for the password when root tries to su <username>.
View 3 RepliesIf there is a general NFS share in the LAN and for example this share has three files - a, b, c is there any way to restrict file access to the root user of one particular host(falcon) in the same LAN environment while the normal users from the same host(falcon) should be able to access the NFS share & files a, b, c.
View 1 Replies View Relatedis there any way so that we can restrict root to delete a file/directories and What is extended file attributes.
View 12 Replies View RelatedOn a Fedora Core box, I have a normal non-privileged user and I also have sole access to the root account. Because I am the only administrator of this box, I frequently su over to root for administrative tasks. The problem is that many of the user configuration I've become accustomed to are only configured on my day-to-day account (.vimrc, .bashrc, .screenrc, etc). Other than giving my day-to-day user account privileges to perform administration tasks, how would I go about sharing configuration between these two accounts?
View 1 Replies View Relatedi am looking for a detailed description of the login process for both root and normal user , also locally and remotely.i read some sentences that the files .bashrc and bash_profile are needed for this process. But that was very concise.
View 9 Replies View RelatedI would like to allow normal users to run some root scripts (e.g the sound subsytem [alsa]) in cases sound is stuck. What is the best way to allow this to happen in opensuse? There are many ways to do that (and I do not know how to use any of them ) and I am not sure which one is more suse all right.
View 6 Replies View RelatedWhen I try to login root from my normal user, I can see this:
Code:
Cannot exec /usr/libexec/openssh/sftp-server: File or directory doesn't exist
(Translateted from my nativ language)
I think that is my bad shell configuration so I check file /etc/ssh/sshd_config and see in the end (this lines couse this bug):
Code:
Match User root
ChrootDirectory /home
AllowTCPForwarding no
X11Forwarding no
[Code].....
Because I have a flaky wireless device, I occasionally get a hung connection and this script gets things running again in just a few seconds except obviously the boldfaced item, as it still tries to run in the root directory and gives errors:
Configuration file "/root/.kde/share/config/knetworkmanagerrc" not writable.
Please contact your system administrator.
So I am not sure how to get knetworkmanager to run as me, the user ubuntu in the /home/ubuntu directory
#!/bin/bash
service network-manager stop
sleep 1
killall -9 knetworkmanager
[code]....
I need to login as root , when linux starts to show login window
But it shudnt be as
1) spawning a new terminal and do commands lik startx -- :3
2) without going in recovery mode
I need to login through login window as normal process
I am using Slackware 13.0 and i have managed to work with my USB pen-drive as root but i cannot do it as a normal user.
View 14 Replies View RelatedI am using fedora 12.I have two internal drives. Both are ntfs. Whenever i click on them it prompts to enter root password. But i want to mount them as normal user without entering any root password. How can i disable it so that i am not asked to enter root password everytime i mount the drives.
View 2 Replies View RelatedI'm trying to get my backup script to run every week, but as a normal user, and not as root as it is done when the script is placed in /etc/cron.weekly. Anacron fits my needs in the sense that it doesn't require my computer to always be on, as opposed to cron, and will just run my script when it can, but at the most each week. Cron fits my needs in the sense that I can run the script as the user I am logged in as. The particular script backs up my home directory with rdiff-backup, and it is very convenient that I am the owner of that backup, since when root performs the backup, I am unable to browse my own backup files and must use "sudo" to do this.
Is there a way to let me use the feature of anacron that allows my computer to not always be on, but still get a weekly execution, and also run the script as a normal (non-root) user?
I'm using fedora 12 and modified the user login options(normal and super user login). I've been using the accounts for a while but i've bumped into a problem - audio not working as a normal user but works when logged in as root. Also, i'm not able to use VLC as a root user.
View 1 Replies View RelatedI'm setting up Ubuntu Karmic on my sister's old computer for my nephew, he's quite young so my sister asked to install some content filtering. I'll first setup an OpenDNS account and I've installed and managed to get dansguardian and squid working on a virtual machine to try it out. so far it's working pretty well, but I need to secure it form the inside out.
I was thinking of blocking specific outbound ports so he could not bypass the proxy. because by default the firefox configuration can be easily changed. so I have a couple of questions.
1. is it possible to block outgoing ports on Ubuntu?
2. is that the best method?
3. is there anything else I should be aware of to prevent subversion?
lastly, this question is probably unrelated to this board but I've set up a cron job to update a dynamic ip with OpenDNS, the problem is that the password is in clear text in the user's crontab, can I play with permissions? is it possible to run the job under a root account and deny read/write access to a normal user?
The normal user is now in the sudoers group. How can i allow it to install programs using it's own password rather than having to know the super-secret Root-Users password?
View 5 Replies View RelatedNSA's Guide to the Secure Configuration of Red Hat Enterprise Linux 5 recommands restricting device ownership to root only.
So my question is why should we restrict device ownership to root? And what does device ownership mean anyway in Linux?
1-Can I do su - userA in php? Cam I have php run the whole script as userA.
2-Can I make php to run from a certain directory? like chroot kind of things.
I use Rh server , can advise if I want to restrict the root user can not directly login to the system ( eg. ssh -l root IP_address" , what can i do ?
View 5 Replies View RelatedI've got a custom compiled kernel, just built on Lucid 10.04 from the kernel sources.System works fine, except for sound.When I log in as normal user and try to play a wav file using.The sound file is being played, but I hear no sound.However, when I do "sudo -s" and become root, execute the same mplayer command then I can hear the sound.My Sound preferences shows no input device and only "Dummy Output" as output device.On the generic kernel as came with the Lucid 10.04 CD, sound preferences shows different devices.The strange thing is: when I compiled my custom kernel, I changed nothing to the sound options in the kernel config file.
View 6 Replies View RelatedI have a Red Hat 4 server with Sungard Luminis installed on it. I was following some instructions on setting up Luminis to start at boot. One of the steps was modifying the sudoers file. Since modifying the sudores file, I am no longer able to "su" to root when logged in as a normal user. When doing so, I get su: incorrect password after putting in the password. I have another server with the exact same setup, broken one is test, the other is production, that works just fine. I made no changes to my production server. I've been looking at different things all day and the only difference I have found between the two are the results I get from running rpm -q --verify coreutils. Running that on my prodution server returns nothing. Results from my test server are below. Is this what is causing my problems? If so, what's the fix? I haven't found that yet. I've checked /etc/pam.d/su, both servers are the same.
rpm -q --verify coreutils
.....UG.. /bin/basename
.....UG.. /bin/cat
.....UG.. /bin/chgrp
[Code].....
Can I restrict the number of ssh connections to my Linux box - by username or by ip or both?
View 1 Replies View RelatedDuring set-up of a home server (running Kubuntu 10.04), I created an admin user for performing administrative tasks that may require an unmounted home. This user has a home directory on the root partition of the box. The machine has an internet-facing SSH server, and I have restricted the set of users that can connect via SSH, but I would like to restrict it further by making admin only accessible from my laptop (or perhaps only from the local 192.168.1.0/24 range). I currently have only an
[Code]....
how can i restrict a single particular user from logging into the server not more than 5 times?
The conditions may be:
1) wrong password
2) can login only 5 times on one day etc.
I want to limit delete of a particular folder in the user's home folder and to restrict any add/change/delete on files in that restricted directory.
/home/myuser
/home/myuser/_protected //no delete
/home/myuser/_protected/1.txt //only read
How can I do that on Ubuntu server?
I need to restrict users if their download file size exceeds xxx amount, set later download speed to "256kbps".
OS: Centos 5.5
Squid 3.1.8
Using opensuse 11.1 64 bit with kde 4.1.3, apps like k3b, or any multimedia apps can not see the optical drives unless I run the apps as root. I also found that to run bladeenc, I have to do it in a root terminal. Is there a way to set permissions for the normal user? Firefox or any text editor work fine as normal user.
View 6 Replies View RelatedI am unable to mount my ext hdd as normal user ,i am using xfce Unable to mount "80G Volume":
Rejected send message, 1 matched rules; type="method_call", sender=":1.23" (uid=1000 pid=2776 comm="exo-mount) interface="org.freedesktop.Hal.Device.Volume" member="Mount" error name="(unset)" requested_reply=0 destination="org.freedesktop.Hal" (uid=0 pid=1908 comm="/usr/sbin/hald))
I have installed Oracle Database server in Red Hat Linux for the first time. I edited the .bash_profile first time & defined some parameters like "export ORACLE_SID =orcl".I quit the editing. Then When I entered ". .bash_profile" it got error " not a valid identifier" it shows like "bash: export: '=orcl' : not a valid identifier for all the lines I edited it shows same error beacause I think I put a space in between "ORACLE_SID" & "=orcl".
So when I tried to edit that using "vi .bash_profile" being a normal user. It doesn't allow me editing.when I try to delete that space (because I think I have got error) using Backspace key on my computer,,it just moves the cursor to left in stead of deleting that space.
I have just installed VirtualBox on my OpenSuSE 11.1 and created my first VM (Windows XP) - and everything works just fine, but.... I can only run it as user root (if I remember correctly I could only install VirtualBox as root)Anybody know what I need to do so that I can run VirtualBox under a normal user account.
View 2 Replies View RelatedHow to login in "root" from a "normal user" account by the Quote:shell scripting.....
View 4 Replies View Related