public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: Mark Shields <laebshade@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] su doesn't work for me.
Date: Sun, 10 Apr 2011 17:32:30 -0500	[thread overview]
Message-ID: <BANLkTimfiuDwYBX0-7hJa1oekq+ZLeCAFA@mail.gmail.com> (raw)
In-Reply-To: <201104101708.01721.alan.mckinnon@gmail.com>

[-- Attachment #1: Type: text/plain, Size: 2148 bytes --]

On Sun, Apr 10, 2011 at 10:08 AM, Alan McKinnon <alan.mckinnon@gmail.com>wrote:

> Apparently, though unproven, at 16:28 on Sunday 10 April 2011, Dale did
> opine
> thusly:
>
> > > That was it!  I've now got su-ability from that normal user.
> > >
> > > Funny, though, on my (very) old Debian system I don't seem to have a
> > > wheel.
> > >
> > > Thanks.
> > >
> > >> Best regards,
> > >> Yann
> >
> > I think that is a Gentoo thing.  It does add some security if you don't
> > want a user, like maybe some little kid, getting root access for any
> > reason.
>
> No, it's pretty standard across Unix.
>
> The BSD's for example have had it since forever - members of the wheel
> group
> being allowed to sudo anything only came along much later.
>
> Leaving it *out* is a Linux-distro thing, probably from the usual usage
> case
> for Linux for many years - a server on the web that actually only had one
> user
> even though it was capable of being fully multi-user. The concept of wheel
> for
> su is pretty redundant in that case.
>
>
> --
> alan dot mckinnon at gmail dot com
>
>
Wheel has nothing to do with su; it has everything to do with sudo, but only
if /etc/sudoers is edited to allow the Wheel group sudo access.  Su is for
changing to a different user, or running a command as another user; doing
either requires the password of that user; sudo, on the other hand, only
requires your password, if you're in the wheel group and the wheel group is
given full sudo access, and the sudo access for wheel requires your
password.

Some examples, assuming your user (the one you're logged in as) is in wheel
and requires a password for sudo access (see: visudo):

sudo su  <--- escalates you to root user with your own password.  This is
running "su" with "sudo".
su user <--- switches to "user" with their password required to be entered
sudo su user < -- switch to "user" with your password required to be entered
sudo <command> <-- runs command as root
sudo -u user <command> <--- runs command as "user"
sudo su - user <--- escalates you to "user" and cd's to their home directory

Please read the man pages for sudo and su for more info.

[-- Attachment #2: Type: text/html, Size: 2969 bytes --]

  parent reply	other threads:[~2011-04-10 22:34 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-04-10 13:21 [gentoo-user] su doesn't work for me Alan Mackenzie
2011-04-10 13:12 ` Alexey Mishustin
2011-04-10 13:19 ` Yann Ormanns
2011-04-10 13:25   ` Alan McKinnon
2011-04-10 14:28   ` Alan Mackenzie
2011-04-10 14:22     ` Yohan Pereira
2011-04-10 16:05       ` Neil Bothwick
2011-04-10 14:28     ` Dale
2011-04-10 15:08       ` Alan McKinnon
2011-04-10 15:35         ` Dale
2011-04-10 22:32         ` Mark Shields [this message]
2011-04-10 22:48           ` Alan McKinnon
2011-04-11  0:46             ` Mark Shields
2011-04-11 13:32               ` Peter Humphrey
2011-04-10 14:42     ` Albert Hopkins

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=BANLkTimfiuDwYBX0-7hJa1oekq+ZLeCAFA@mail.gmail.com \
    --to=laebshade@gmail.com \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox