Author Topic: Normal Vs. Root User  (Read 12282 times)

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« on: November 04, 2005, 06:52:05 am »
I'm getting closer to having everything running, but I can't get su to work when running as a normal user. I always get the errors "Using fallback suid method" and "This applet requires root priveledges(sic)".
I think su is setup right because as root I can use: su sheila, and then startx starts my normal users window manager.
I setup /home/sheila as a softlink to point to /home/ide/home/sheila.
I've found some messages about changing permissions and have made sure everything in etc is root.
What am I missing?
« Last Edit: November 07, 2005, 06:20:42 pm by Sheila »
SL-3100, pdaXrom

bluedevils

  • Hero Member
  • *****
  • Posts: 1284
    • View Profile
    • http://
Normal Vs. Root User
« Reply #1 on: November 04, 2005, 07:45:45 am »
I don't use pdaxrom, but on a normal linux box the user has to be part of the wheel group to use su.
I'm now an iphone user and use my zaurii as serial terminals, perl and shell scripting and when I need 640x480 screens

sl-c3100/pda cacko 1.23 | sl-6000l/needs battery | sl-c760/server pdaxrom rc12 | Former sl-5500/tkcrom owner (sister's birthday gift)

sashz

  • Sr. Member
  • ****
  • Posts: 388
    • View Profile
    • http://
Normal Vs. Root User
« Reply #2 on: November 04, 2005, 08:10:06 am »
edit file /etc/busybox.conf like this:

[SUID]
traceroute      = sxx root.root
ping    = sxx root.root
su      = sxx root.root

we will try add support for non root users in new release

gromituk

  • Full Member
  • ***
  • Posts: 207
    • View Profile
Normal Vs. Root User
« Reply #3 on: November 04, 2005, 08:13:05 am »
Quote
I don't use pdaxrom, but on a normal linux box the user has to be part of the wheel group to use su.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102227\"][{POST_SNAPBACK}][/a][/div]

That's interesting.  I think it depends on the distribution though, as I've just checked and ordinary users of SuSE are in groups "users uucp dialout audio video" and can su/sudo.

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« Reply #4 on: November 04, 2005, 03:59:03 pm »
Quote
I don't use pdaxrom, but on a normal linux box the user has to be part of the wheel group to use su.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102227\"][{POST_SNAPBACK}][/a][/div]
It is. As I stated in my post, su does work partially. I'll try sashz' suggestion next.
SL-3100, pdaXrom

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« Reply #5 on: November 04, 2005, 04:18:02 pm »
Quote
we will try add support for non root users in new release
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102232\"][{POST_SNAPBACK}][/a][/div]

My /etc/busybox.conf file already contained the ping and su lines, but not the traceroute line. Adding it did nothing. If I let someone use my Z, then I have to give them root privileges?
SL-3100, pdaXrom

hobnob

  • Newbie
  • *
  • Posts: 1
    • View Profile
Normal Vs. Root User
« Reply #6 on: November 06, 2005, 06:47:30 am »
I think you'll have to suid /bin/busybox. This is the case in RC12.
I'm fairly new to pdaXrom so I haven't tried earlier versions.

Code: [Select]
chmod u+s /bin/busybox

gromituk

  • Full Member
  • ***
  • Posts: 207
    • View Profile
Normal Vs. Root User
« Reply #7 on: November 06, 2005, 07:47:24 am »
Quote
If I let someone use my Z, then I have to give them root privileges?
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102350\"][{POST_SNAPBACK}][/a][/div]

Well to be fair, this is an unusual situation.  PDAs are normally single-user machines.  Support for non-root users comes up as a discussion point from time to time and is on the feature request list (and I see sashz has mentioned the possibility of adding it).  I understand your unease at seeing a Linux installation running under root.  The most upsetting example is Linspire.  I read some comments from Michael Robertson about it and he seemed to be terribly naive as to the dangers.

It seems that not much needs to be done to add non-root users!

albertr

  • Hero Member
  • *****
  • Posts: 535
    • View Profile
    • http://
Normal Vs. Root User
« Reply #8 on: November 06, 2005, 01:28:32 pm »
I'm using an unprivileged account since I've installed pdaXrom, and it works fine with some minor tweaks (privs/permissions need to be changed on certain files). I was using Openbox WM, but now using XFCE.
-albertr

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« Reply #9 on: November 07, 2005, 06:15:11 pm »
Quote
Code: [Select]
chmod u+s /bin/busybox[div align=\"right\"][a href=\"index.php?act=findpost&pid=102529\"][{POST_SNAPBACK}][/a][/div]
This worked! Thanks!
SL-3100, pdaXrom

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« Reply #10 on: November 07, 2005, 06:19:42 pm »
Quote
Quote
If I let someone use my Z, then I have to give them root privileges?
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102350\"][{POST_SNAPBACK}][/a][/div]
Well to be fair, this is an unusual situation.  PDAs are normally single-user machines.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102534\"][{POST_SNAPBACK}][/a][/div]
What if you want to deploy Z's to field staff? As an administrator, you don't want to give root access to the clueless. I don't think the situation is unusual at all.
Anyway, following the suggestions of sashz and hobnob. I got it to work.
« Last Edit: November 08, 2005, 10:00:15 pm by Sheila »
SL-3100, pdaXrom

gromituk

  • Full Member
  • ***
  • Posts: 207
    • View Profile
Normal Vs. Root User
« Reply #11 on: November 08, 2005, 04:45:50 am »
Oh I agree, this situation is one where it's perfectly desirable to have root and non-root access; doesn't mean it isn't unusual though  

PS Don't credit me - I didn't contribute anything useful to this discussion!

Sheila

  • Newbie
  • *
  • Posts: 37
    • View Profile
Normal Vs. Root User
« Reply #12 on: November 08, 2005, 10:01:32 pm »
Quote
PS Don't credit me - I didn't contribute anything useful to this discussion!
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102812\"][{POST_SNAPBACK}][/a][/div]
Apologies to hobnob. His/her suggestion was the fix.
SL-3100, pdaXrom

hasues

  • Newbie
  • *
  • Posts: 4
    • View Profile
    • http://twitter.com/hasues
Normal Vs. Root User
« Reply #13 on: November 08, 2005, 11:40:07 pm »
Quote
Quote
I don't use pdaxrom, but on a normal linux box the user has to be part of the wheel group to use su.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102227\"][{POST_SNAPBACK}][/a][/div]

That's interesting.  I think it depends on the distribution though, as I've just checked and ordinary users of SuSE are in groups "users uucp dialout audio video" and can su/sudo.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=102233\"][{POST_SNAPBACK}][/a][/div]

You are correct.  It depends on the distribution.

ratki

  • Newbie
  • *
  • Posts: 22
    • View Profile
    • http://
Normal Vs. Root User
« Reply #14 on: January 19, 2006, 04:53:51 pm »
Hi,

I've used my Z allways with my own user ID. It works with some "buts".

If you want to have correct usage of CF cards you (even me!!!) need the "cardctl" compiled accordingly. (trusted mode?) Now I need an extra window with "su" for this. (Yes, "su" works at me.)

I've solved some minor points:
1. Automatic rotate the screen:

 chmod +s /usr/bin/chkhinge

2. power key off:

 chmod a+w  /proc/power_key_off

3. using audio: (e.g. kphone)

 addgroup audio <your_user_name>
 chgrp -R audio /dev/sound      

4. Using the brightness setting

 chmod +s /sbin/setfl

5. ppp (with kppp)

 addgroup dial <your_user_name>
 chgroup -R dial /etc/ppp      
 chmod -R g+rx /etc/ppp  
 chmod +s /usr/sbin/pppd

I've a script to for setting the files in /dev and /proc (see point 2 and 3) in /etc/rc.d/init.d/ratki with links from rc3.d, rc4.d and rc5.d . This sets them at boot with root privileg.

Best wishes,

Tamas