Re: su or sudo su?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tim <ignored_mailbox@xxxxxxxxxxxx> wrote:
>Sent: Oct 18, 2010 2:13 PM
>To: James Mckenzie <jjmckenzie51@xxxxxxxxxxxxx>, Community support for Fedora users <users@xxxxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: su or sudo su?
>
>On Mon, 2010-10-18 at 09:40 -0700, James Mckenzie wrote:
>> Also root's home directory should NEVER be / (root) but rather
>> something like /home/root.
>
>Wrong.  Bad advice.  The following somewhat mitigates that, but you've
>muddied the water with bad advice in the first place.

I did not state /root but rather the base root directory '/'.  Anything else would be ok in my book from a security standpoint.

>
>> I've known of several folks who 'forgot' they were root or had either
>> sudo'd or su -'d and then issued the famous (or infamous) rm -rf * 
>> wiping out the system or at least destroying critical files.
>
>It's fine for root to have /root as the home space.  So the "never" word
>is bad.  It's the default location.  And your advice may to scare the
>completely clueless into wrecking their system.
>
>It's a bad idea to put it in /home, because /home could be on an
>unmounted partition, and root may need access to its home space to fix a
>problem.  So if you're going to suggest shift it, don't suggest putting
>it /home.  Certainly not without complete explanation.

Never thought of that, thank you for the advice.  Most folks just install using the defaults and some systems default to root's home being the base root directory and not /root or /home/root.  Thus using su - will place you in the base root directory.  Danger, danger, danger as I stated above.
>
>Moving roots home further into the tree may help against some rm
>accidents, but it's by no means a foolproof solution.  Bad wildcarding
>choices will get them into the parent directory.  And prefixing the path
>with the slash will destroy "/" contents no matter where they started
>out working from.
>
We cannot fix stupid and some users scare me.  That's why they don't get sudo and will never get root's password either.

But thank you for the good advice here.  I never thought of /home being a mounted partition and /root not being one (when I build a system I tend to overdo the number of independent partitions.)

James McKenzie

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux