From: DenverD on
> Yes, I do know it's certainly not a good idea but I have done it in the
> past and will probably do so again sometime in the future. The
> important thing to not do, if you're going to use X as root, is to
> *keep* *out* *of* *the* *users* *home* *directories* or, if you
> manipulate something in a users home directory, use chown to
> recursively set the ownership of the users home directory to that user.
> That way any changed or incorrectly owned files become owned by that
> user and it prevents some of the problems of having root-owned files
> cause when trying to start X as the normal user.

that is exactly the prescription to cure most (maybe all, i'm not
sure) of those automagical problems mentioned earlier..

the problem is, when you are working with n00bs it is often difficult
to learn what they did to break their machine..

much better, in my opinion is to foot stop: don't log in as root
(cause you KNOW they are gonna go direct to their home and 'try'
something.)..

--
DenverD (Linux Counter 282315) via Thunderbird 3.0.1-1.1, KDE 3.5.7,
openSUSE Linux 10.3, 2.6.22.19-0.4-default #1 SMP i686 athlon
From: David Bolt on
On Sunday 27 Sep 2009 16:51, Happy Oyster played with alphabet
spaghetti and left this residue on the plate:

> On Sun, 27 Sep 2009 13:10:57 +0100, David Bolt <blacklist-me(a)davjam.org> wrote:
>
>>Yes, I do know it's certainly not a good idea but I have done it in the
>>past and will probably do so again sometime in the future. The
>>important thing to not do, if you're going to use X as root, is to
>>*keep* *out* *of* *the* *users* *home* *directories* or, if you
>>manipulate something in a users home directory, use chown to
>>recursively set the ownership of the users home directory to that user.
>>That way any changed or incorrectly owned files become owned by that
>>user and it prevents some of the problems of having root-owned files
>>cause when trying to start X as the normal user.
>
> And THERE is a damned big bullshit of SuSE (or whoever is responsible for THIS
> bug): If a directory has the rights set as you want them, the order to the
> system to change the rights ALSO for the lower subdirectories and files, this
> order is not obeyed.

How are you changing them? From a console and using chown, the changes
occur when I do them:

davjam(a)moray:~> ls -l music
total 684
-rw-r--r-- 1 davjam users 478744 2009-09-16 01:59 core.410
-rw-r--r-- 1 davjam users 55148 2009-08-28 04:10 knoppix.binaries.txt
-rw-r--r-- 1 davjam users 4747 2009-08-28 15:24 knoppix.packages.txt
-rwxr-xr-x 1 davjam users 17615 2009-09-07 04:43 test
-rw-r--r-- 1 davjam users 3075 2009-09-07 04:36 test.c
-rw-r--r-- 1 davjam users 126996 2009-08-28 04:41 unknown.knoppix.packages.txt
davjam(a)moray:~> sudo chown root.root music -R
root's password:
davjam(a)moray:~> ls -l music
total 684
-rw-r--r-- 1 root root 478744 2009-09-16 01:59 core.410
-rw-r--r-- 1 root root 55148 2009-08-28 04:10 knoppix.binaries.txt
-rw-r--r-- 1 root root 4747 2009-08-28 15:24 knoppix.packages.txt
-rwxr-xr-x 1 root root 17615 2009-09-07 04:43 test
-rw-r--r-- 1 root root 3075 2009-09-07 04:36 test.c
-rw-r--r-- 1 root root 126996 2009-08-28 04:41 unknown.knoppix.packages.txt
davjam(a)moray:~> ls -l
total 9388
....
drwxr-xr-x 2 root root 151 2009-09-18 01:49 music
....
davjam(a)moray:~> sudo chown davjam.users /home/davjam -Rv|grep -i changed
chown: cannot access `/home/davjam/.gvfs': Permission denied
changed ownership of `/home/davjam/music/.directory' to davjam:users
changed ownership of `/home/davjam/music/knoppix.binaries.txt' to davjam:users
changed ownership of `/home/davjam/music/unknown.knoppix.packages.txt' to davjam:users
changed ownership of `/home/davjam/music/knoppix.packages.txt' to davjam:users
changed ownership of `/home/davjam/music/test.c' to davjam:users
changed ownership of `/home/davjam/music/test' to davjam:users
changed ownership of `/home/davjam/music/core.410' to davjam:users
changed ownership of `/home/davjam/music' to davjam:users
davjam(a)moray:~>


Regards,
David Bolt

--
Team Acorn: www.distributed.net OGR-NG @ ~100Mnodes RC5-72 @ ~1Mkeys/s
openSUSE 10.3 32b | openSUSE 11.0 32b | |
openSUSE 10.3 64b | openSUSE 11.0 64b | openSUSE 11.1 64b | openSUSE 11.2m6
RISC OS 3.6 | RISC OS 3.11 | openSUSE 11.1 PPC | TOS 4.02
From: David Bolt on
On Sunday 27 Sep 2009 17:06, J G Miller played with alphabet spaghetti
and left this residue on the plate:

> On Sun, 27 Sep 2009 13:40:31 +0200, houghi wrote:
>
>> But anyway, I would like to know what you think is a "exceptionally
>> special circumstance" where you would run as root
>
> A possible circumstance could be root needs to run an X11 program for some
> reason (administration task) and /home is not available because the file
> system on it is bad, so normal users are unable to login.

Why would you *need* to run any GUI based program for administration
tasks? YaST2 runs very nicely as an ncurses application on a text
console with minimal differences between the text layout and the QT
layout. And if a file system is bad, you wouldn't be running a GUI
application to fix it. That's what fsck and other related tools are
for.


Regards,
David Bolt

--
Team Acorn: www.distributed.net OGR-NG @ ~100Mnodes RC5-72 @ ~1Mkeys/s
openSUSE 10.3 32b | openSUSE 11.0 32b | |
openSUSE 10.3 64b | openSUSE 11.0 64b | openSUSE 11.1 64b | openSUSE 11.2m6
RISC OS 3.6 | RISC OS 3.11 | openSUSE 11.1 PPC | TOS 4.02
From: David Bolt on
On Sunday 27 Sep 2009 15:17, houghi played with alphabet spaghetti and
left this residue on the plate:

> David Bolt wrote:
>>>> ! Non of the terminal (alt+ctrl+Fx) works either.
>>
>> That's not a good sign.
>
> type '3' when booting. This will not start the X server. I am also
> unable to go to tty 1-6 when the NVidia drivers is used.

On of my systems has an on-board SIS 660 graphics chip-set and, when
used directly, will very often lock up both the screen and keyboard
when switching between consoles. Since I mostly use it using SSH or NX,
this doesn't bother me. On my other systems where on-board nVidia
chip-sets or nVidia graphics cards are used, I have no issues with
swapping to or from other consoles while using the nVidia drivers. In
fact I often get caught out on this system when test-driving susestudio
applications under VirtualBox as I frequently press the wrong key combo
to go to another console. In stead of going to one in the VM, I swap to
one on the real hardware.

>>> Never startx as root! Never!
>>
>> You don't like the pretty desktop background with those nice little
>> triangular warning signs and bombs?
>
> The what now? ;-)

More or less, yes :-)

>> Yes, I do know it's certainly not a good idea but I have done it in the
>> past and will probably do so again sometime in the future.
>
> I have done it as well, just to see if the background has changed. :-D
> Otherwise I have no need for it in the last few years.

I can't remember the previous time I did it, possibly back when 9.3 was
newly released. It might have been even earlier, but the background
there made it clear that you weren't running as a normal user. The
background now looks a lot different to what I remember. The last time
I saw it, the background was a bright red with the warning triangles
and bombs. Now[0], just make things really "Not A Good Idea"(tm), KDE4
when started as root doesn't give a visual indication that you're
running as root. Instead it displays the standard desktop background,
which is "Air" on my system. The root desktop image is still there but
you now have to manually select it and, while the bomb and triangle is
still there, the background has changed to a pale blue.

>> And if you don't, post the actual errors produced when using startx as
>> a user.
>
> He can't get into X, he cant get into CLI (as far as I can see) so he
> can't get to the errors.

From what I saw, the system was booting into run-level 5 but X wasn't
starting and so he was seeing the same login prompt as he'd see on any
of the other consoles.

> Most likely he does not even see any errors.

Possibly, possibly not.


[0] Just to be silly, I logged in as root on a physical console,
started a second session of X, waited for the desktop to finish
loading and then logged back out.

Regards,
David Bolt

--
Team Acorn: www.distributed.net OGR-NG @ ~100Mnodes RC5-72 @ ~1Mkeys/s
openSUSE 10.3 32b | openSUSE 11.0 32b | |
openSUSE 10.3 64b | openSUSE 11.0 64b | openSUSE 11.1 64b | openSUSE 11.2m6
RISC OS 3.6 | RISC OS 3.11 | openSUSE 11.1 PPC | TOS 4.02
From: Happy Oyster on
On Sun, 27 Sep 2009 17:26:57 +0100, David Bolt <blacklist-me(a)davjam.org> wrote:

>On Sunday 27 Sep 2009 16:51, Happy Oyster played with alphabet
>spaghetti and left this residue on the plate:
>
>> On Sun, 27 Sep 2009 13:10:57 +0100, David Bolt <blacklist-me(a)davjam.org> wrote:
>>
>>>Yes, I do know it's certainly not a good idea but I have done it in the
>>>past and will probably do so again sometime in the future. The
>>>important thing to not do, if you're going to use X as root, is to
>>>*keep* *out* *of* *the* *users* *home* *directories* or, if you
>>>manipulate something in a users home directory, use chown to
>>>recursively set the ownership of the users home directory to that user.
>>>That way any changed or incorrectly owned files become owned by that
>>>user and it prevents some of the problems of having root-owned files
>>>cause when trying to start X as the normal user.
>>
>> And THERE is a damned big bullshit of SuSE (or whoever is responsible for THIS
>> bug): If a directory has the rights set as you want them, the order to the
>> system to change the rights ALSO for the lower subdirectories and files, this
>> order is not obeyed.
>
>How are you changing them? From a console and using chown, the changes
>occur when I do them:

From the GUI: <rightclick> <properties>
--
TINA LIVE ! TINA LIVE ! TINA LIVE ! TINA LIVE ! TINA LIVE ! TINA LIVE !

http://www.leipziger-montagsdemo.de/informationen/daten/daten_02_spd/TINA-There_Is_No_Alternative_I.jpg
http://www.leipziger-montagsdemo.de/informationen/daten/daten_02_spd/TINA-There_Is_No_Alternative_II.jpg
First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4 5 6 7 8 9 10 11
Prev: useradd issue
Next: ttyUSB0 and ICS