From: Albert Hopkins <marduk@letterboxes.org>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] sudo in kernel config ?
Date: Sat, 11 Sep 2010 05:46:59 -0400 [thread overview]
Message-ID: <1284198419.2992.20.camel@paska> (raw)
In-Reply-To: <201009111024.31634.stephane@22decembre.eu>
On Sat, 2010-09-11 at 10:24 +0200, Stéphane Guedon wrote:
> few months ago, I read linux kernel in a nutschell(sic), and the author wrote we
> shouldn't do kernel operations (config and build) as root.
I call bullsh*t. I've been compiling kernels for 17 years and for the
most part have done it as root without any problems.
What the author is saying is that, to an extent, in theory no one should
compile anything as root, or really do anything non-system-adminly as
root. You should only do as root what is critically necessary (e.g.
make install) as root.
In a perfect, tidy world we'd all do that. This world, however does not
exist. Even portage, by default does configure and make as root (albeit
in a sandbox so it is safe(r).
What the author means is theoretically the config/compile phase could
unintentionally cause some kind of harm to your system. In practice I
have never seen this or heard of it. The kernel devs are bright enough
to ensure that the compilation does nothing outside the source tree
itself.
It's a good guideline but, like the government's dietary guidelines, not
ones I intend to follow religiously.
> Is sudo (or kdesudo ?) a good replacement to that ?
sudo runs things as root, so effectively you've done nothing but add a
password prompt to the mix.
Gentoo actually makes this a bit more difficult, because usually one
uses portage to install the kernel sources, and they get installed as
root-owned, and only root has write access to the kernel tree.
Some people, such as myself, use kernel sources outside of portage (I
follow a git repo) and do so as a non-root user. In this case the
kernel tree is not owned by root and the config/compile is easily done
as a non-root user.
If you are super-paranoid. You can make a non-root copy
of /usr/src/linux and compile it as a non-root user.
But there really isn't any point in using sudo. It's effectively doing
the same thing that you are trying to avoid.
next prev parent reply other threads:[~2010-09-11 9:47 UTC|newest]
Thread overview: 30+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-09-11 8:24 [gentoo-user] sudo in kernel config ? Stéphane Guedon
2010-09-11 9:46 ` Albert Hopkins [this message]
2010-09-11 10:41 ` Stéphane Guedon
2010-09-11 13:43 ` Volker Armin Hemmann
2010-09-11 15:53 ` Albert Hopkins
2010-09-11 20:18 ` Alan McKinnon
2010-09-11 20:34 ` [gentoo-user] " Nikos Chantziaras
2010-09-11 20:51 ` Alan McKinnon
2010-09-11 21:05 ` Nikos Chantziaras
2010-09-12 8:14 ` Stéphane Guedon
2010-09-11 20:35 ` [gentoo-user] " Dale
2010-09-11 20:28 ` Etaoin Shrdlu
2010-09-11 20:49 ` Alan McKinnon
2010-09-11 22:05 ` Peter Humphrey
2010-09-11 22:03 ` Etaoin Shrdlu
2010-09-11 23:06 ` Peter Humphrey
2010-09-11 23:15 ` [gentoo-user] Re: [OT] " Etaoin Shrdlu
2010-09-12 9:16 ` Peter Humphrey
2010-09-12 10:24 ` Etaoin Shrdlu
2010-09-12 16:45 ` [gentoo-user] " Al
2010-09-11 20:42 ` [gentoo-user] " Nikos Chantziaras
2010-09-11 20:49 ` Dale
2010-09-11 21:01 ` Nikos Chantziaras
2010-09-11 21:30 ` Alan McKinnon
2010-09-11 21:47 ` Dale
2010-09-11 23:17 ` Alan McKinnon
2010-09-12 16:59 ` walt
2010-09-11 17:59 ` Nikos Chantziaras
[not found] <frufU-519-15@gated-at.bofh.it>
[not found] ` <frvbX-6Dv-3@gated-at.bofh.it>
2010-09-12 7:29 ` [gentoo-user] " Gregory Shearman
2010-09-12 16:36 ` Bill Longman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1284198419.2992.20.camel@paska \
--to=marduk@letterboxes.org \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox