public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: meino.cramer@gmx.de
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] fc-cache
Date: Thu, 27 Aug 2009 20:40:03 +0200	[thread overview]
Message-ID: <20090827184003.GA5873@solfire> (raw)
In-Reply-To: <94C385DF-141A-4D14-831C-0B5657DB8927@stellar.eclipse.co.uk>

Stroller <stroller@stellar.eclipse.co.uk> [09-08-27 20:28]:
> 
> On 25 Aug 2009, at 23:26, meino.cramer@gmx.de wrote:
> >...
> >I use Icewm and X.org as desktop environment.
> >
> >Ending my work with a command like
> >
> >   sudo halt
> >
> >from a terminal window results in no problem at all.
> >
> >But:
> >
> >When I do something like:
> >
> >   aunpack mysourceproject.tar.7z; cd mysourceproject; \
> >   ./configure && make && make install; sudo halt
> >
> >switch off my monitor and go to sleep, cause this will run for an
> >hour, and start my box next morning again, all fonts, which are
> >defined via xorg.conf are displayed in a very tine shape.
> 
> Um.... sorry if this is a dumb question, but does the `sudo halt` 
> actually run? Here that would be sitting waiting for me to enter a 
> password (but your /etc/sudoers may be configured  differently).
> 
> Stroller.
> 
> 

Hi

There are no dumb questions, Stroller, there are only dumb answers...
:)

You can configure /etc/sudoers to accept "sudo" without password and
execute a certain command via sudo with root rights or others.

On machines used by many users and or directly connected to a backbone
this may or is a security hole.

On my machine I am alone and sudoers is setup only to accept
passwordless "sudos" from me (my username)

The according line looks like this:
<my username>        ALL=(ALL)       NOPASSWD: ALL

Which means: accept any command without password compined with sudo.

This may or may not a discussable setting, though...

On the other side: A person who is able to crack my router and gain root
rights on my machine will not be stopped by sudoers-settings.
And the possibility to be able to crack a password is based on the
knowledge/tools to the attacker and the password but is not based
on the kind of user who owns it, whether it is a root password or
a users password does not matter...

Only my to photons...your light might be brighter... :o)

HTH!
Have a nice <time of day you currently have> ;)
Keep hacking!
mcc




-- 
Please don't send me any Word- or Powerpoint-Attachments
unless it's absolutely neccessary. - Send simply Text.
See http://www.gnu.org/philosophy/no-word-attachments.html
In a world without fences and walls nobody needs gates and windows.




      reply	other threads:[~2009-08-27 13:30 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-08-25 22:26 [gentoo-user] fc-cache meino.cramer
2009-08-27 18:21 ` Stroller
2009-08-27 18:40   ` meino.cramer [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090827184003.GA5873@solfire \
    --to=meino.cramer@gmx.de \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox