Root should it be enabled or disabled(Code to enable please)

Chat about anything related to Linux Mint

Root should it be enabled or disabled(Code to enable please)

Postby Incentive I.C on Sun Nov 25, 2012 12:56 am

Well i was reading throught thishttp://forums.linuxmint.com/viewtopic.php?f=42&t=113593 and when I found out the root account is actually unlocked by default(Why?!)( scroll down a little you willl find what i am talking about) I though that was kind of silly and a pretty big security risk so I followed the steps to lock it with these command
Code: Select all
sudo passwd -dl root

To the main question how to I enable direct access to the account. I will probable keep it locked for now be i just need to know how to enable just In case i ever have to have use it any ideas :?

But why in the world is it enabled in the first place. Most people use there computer for simple tasks(such as internet browsers, listening to music, playing games) Which requires the root account in no way at all(Just use Sudo right?)leaving it unlocked just for the sake of it is a very good way to get the system totally distorted! You got root you got the system! Okay so important data you can just encrypt sure but what about the rest of the system files the boot and other important things with root as long as its not in use you can just delete it! What user would do that more like what application would do that! Running a cleanup in root not a good idea but what if the user forgets! Make users go through the process of enabling it rather than disabling it! I heard about a guy that unsecured his Wifi (Idk why maybe for a test?) and of coarse all his " Neighbors" connected to it like mad. So he changed the name to something like "please do not connect" and of course those people just had to see that Facebook sh#t. So he changed it again to something like "Seriously do not connect to my wifi" and yeah that twitter just had to be read so it was like Christmas time in Kmart on that poor router...... The man decide to change it one more time "DO NOT CONNNECT!!!!!!" (Okay i do not think that was the name but you get it :wink: ) Common sense was not in the atmosphere so they connected and the man sent out a code that worked the HDD so hard it scathed the inside and the data was lost. These could have been prevented by A: spending that extra dollar for that SDD or Most importantly not allowing the code the be executed in the first place! Yeah i am sure the code needed root permission and it probable had a way of finding your password but if it cannot get the your root password there is only so much it can do. With root account enabled your account password is roots password too with it disabled it has not password and is locked.(Yes I believe these were windows computer but that not the point!)
I am not saying get rid of the user account root (please do not) I am just saying to have it locked and make the user put in a terminal command to lock it and unlock as needed but keep it locked as default seems like a better idea to me. It can always be enabled by a simple little command! Some users might just run root account because of all the freedom it brings but a least making them look up the code will make them see the risks.

This is a nice topic discussing ithttp://forums.linuxmint.com/viewtopic.php?f=46&t=115790
Also in the terminal when the font turns red its root right. Mine turned red from running su - root. It sure was intimidating that red font! I quickly closed it because I thought I was root and did not want to break my system!
The best way to learn from it is break it OS's (is there a plural for OS?) included.
User avatar
Incentive I.C
Level 4
Level 4
 
Posts: 330
Joined: Mon Aug 27, 2012 9:20 pm

Linux Mint is funded by ads and donations.
 

Re: Root should it be enabled or disabled(Code to enable ple

Postby xenopeek on Sun Nov 25, 2012 6:47 am

It's harmless to have it enabled, and it means its available when you need it. For example for recovery mode, on which you need to log in as root. By default Linux Mint has MDM configured so that you can not log in to your desktop as root, you would need to explicitly allow it in MDM configuration to be able to log in to your desktop as root.
User avatar
xenopeek
Level 21
Level 21
 
Posts: 15447
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Root should it be enabled or disabled(Code to enable ple

Postby exploder on Sun Nov 25, 2012 11:01 am

I agree with Vincent Vermeulen on this. There are some instances where you need root access and it is nice that Clem has left this option open if you need it. There is no security threat or anything in having this ability.
exploder
Level 15
Level 15
 
Posts: 5917
Joined: Tue Feb 13, 2007 10:50 am
Location: HartfordCity, Indiana USA

Re: Root should it be enabled or disabled(Code to enable ple

Postby Incentive I.C on Sun Nov 25, 2012 1:41 pm

exploder wrote:I agree with Vincent Vermeulen on this. There are some instances where you need root access and it is nice that Clem has left this option open if you need it. There is no security threat or anything in having this ability.

Okay so if there really is no risk what terminal command would I have to run to re enable it as it seems possible to enable it from other websites i have read.
Thanks.
The best way to learn from it is break it OS's (is there a plural for OS?) included.
User avatar
Incentive I.C
Level 4
Level 4
 
Posts: 330
Joined: Mon Aug 27, 2012 9:20 pm

Re: Root should it be enabled or disabled(Code to enable ple

Postby exploder on Sun Nov 25, 2012 1:50 pm

Just make the change in MDM.
exploder
Level 15
Level 15
 
Posts: 5917
Joined: Tue Feb 13, 2007 10:50 am
Location: HartfordCity, Indiana USA

Re: Root should it be enabled or disabled(Code to enable ple

Postby Incentive I.C on Sun Nov 25, 2012 2:02 pm

exploder wrote:Just make the change in MDM.

Change? Is there a setting in MDM that i can go to? or do i use the Login application to make the change?
What am i suppose to change it to?
The best way to learn from it is break it OS's (is there a plural for OS?) included.
User avatar
Incentive I.C
Level 4
Level 4
 
Posts: 330
Joined: Mon Aug 27, 2012 9:20 pm

Re: Root should it be enabled or disabled(Code to enable ple

Postby exploder on Sun Nov 25, 2012 2:19 pm

You will see the setting in the Login Window properties.
exploder
Level 15
Level 15
 
Posts: 5917
Joined: Tue Feb 13, 2007 10:50 am
Location: HartfordCity, Indiana USA

Re: Root should it be enabled or disabled(Code to enable ple

Postby Incentive I.C on Sun Nov 25, 2012 4:04 pm

exploder wrote:You will see the setting in the Login Window properties.

I am guessing the the Login windows preferences is were i am suppose to be but the settings are unchanged. The only way i know the change is still there is to go into the terminal put in the code
Code: Select all
sudo passwd -S root
I will see Root L before the rest of the command and one a system unchanged with this command I see Root P before the command. Do you know what the "P" and "L" stand for?
Attachments
Screenshot from 2012-11-25 13_34_10.png
Screenshot from 2012-11-25 13_34_10.png (75.56 KiB) Viewed 3408 times
The best way to learn from it is break it OS's (is there a plural for OS?) included.
User avatar
Incentive I.C
Level 4
Level 4
 
Posts: 330
Joined: Mon Aug 27, 2012 9:20 pm

Linux Mint is funded by ads and donations.
 

Return to Chat about Linux Mint

Who is online

Users browsing this forum: Reorx and 5 guests