trinity-users@lists.pearsoncomputing.net

Message: previous - next
Month: December 2015

Re: [trinity-users] KSysV missfire

From: Gene Heskett <gheskett@...>
Date: Sat, 19 Dec 2015 08:47:43 -0500
On Saturday 19 December 2015 05:21:42 Rolf Schmidt wrote:

> Hi Gene
>
> > You missed the point, it demands a root pw, that on this wheezy
> > system, does not exist, so it cannot be launched from the menu entry
> > by any pw entered.  The pw used for doing a sudo is not accepted. 
> > That was my point.
> >
> > Don't put it in the menu's at all if the user cannot use his sudo to
> > get the root rights it needs.
>
> what happens, if you do - if you are allowed to start su from sudo:
>
> xhost + # to allow other users to access the xserver
> sudo su # to become root without a password
> export DISPLAY=:0 # set the DISPLAY variable to access the xserver
> ksysv # start the wanted program
>
> If this works, you can use the program without a password.
>
> HTH
> Rolf

Would that not be considered a security hole you could drive a 65 foot 
refer with 88,000 lbs of swinging beef thru, on a cooked spaghetti 
WV/USA road?  (its the only kind of roads we have here in West Virginia) 

It sure would to me.  But folks call me paranoid too.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Some mill pix are at:
Genes Web page <http://geneslinuxbox.net:6309/gene/GO704-pix>