Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #190825 > unrolled thread

UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in systemd)

Back to article view | Back to linux.debian.user

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in  systemd) Jason <electron@emypeople.net> - 2018-01-09 05:10 +0100
    Re: UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in  systemd) Christian Groessler <chris@groessler.org> - 2018-01-09 16:00 +0100
      Re: UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in  systemd) Roberto C. Sánchez <roberto@debian.org> - 2018-01-09 16:30 +0100
        Re: UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in  systemd) Christian Groessler <chris@groessler.org> - 2018-01-09 18:10 +0100
      Re: UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in  systemd) Erik Christiansen <dvalin@internode.on.net> - 2018-01-10 04:50 +0100

#190825 — UID 1000 on Raspberry Pi (Was: Re: Embarrassing security bug in systemd)

On Sun, Dec 10, 2017 at 10:17:12PM -0500, Gene Heskett wrote:
> On Sunday 10 December 2017 19:02:49 David Wright wrote:
> 
> > On Sun 10 Dec 2017 at 16:43:02 (-0500), Gene Heskett wrote:

[...]

> >
> This I'd guess is important, if you have several users. I don't, except 
> for amanda and nut, and thats only on this machine. All the rest have 
> one user, me, known under various aliases because the idiot installer is 
> now set to give the first user the machines name like pi or rock64. I 
> spent a month trying to fix user 1000 to be me instead of pi on the pi.

On the Pi, this is what worked for me:

1. Add a new user (and add him to group sudo). This user gets ID 1001.
   $ sudo adduser tempuser
   $ sudo adduser tempuser sudo

2. Log out of user pi and log in as the newly created user.
   
3. Delete user pi (pi must not have any processes running)
   $ sudo deluser pi

4. Add the desired username:
   $ sudo adduser gene

Since no 1000 exists anymore you get UID 1000. If desired,
delete the temporary user and the deleted users' home directories.

It's possible the raspi-config utility might have a problem performing
certain actions with no pi user existing so you might want to be a bit
careful and make sure initial configuration is done before trying
this.

> It was like trying to excavate the pine island pirate treasure, so I 
> eventually gave it up and reinstalled the jessie image. Ditto on the 
> rock64, so the only thing common is the password. Fortunately an ssh -Y 
> usr@machine works just fine.
> 
> I would not call my wife computer illiterate, but the last machine she 
> had to use for report card preps, (she's a long retired music teacher) 
> was a Packard-Bell with an 80286 cpu and dos-3.1 on floppies. She could 
> do it by hand in 1/3rd of the time. I have set her down at prior 
> versions of this keyboard, but running a mouse is beyond her. She spent 
> 34 years teaching grade school music in the county school system.
> 
> > Hopefully tomás won't need to paraphrase this :)
> >
> > Cheers,
> > David.
> 
> 
> Cheers, Gene Heskett

-- 
Jason

[toc] | [next] | [standalone]

#190843

On 01/09/18 04:49, Jason wrote:
>> This I'd guess is important, if you have several users. I don't, except
>> for amanda and nut, and thats only on this machine. All the rest have
>> one user, me, known under various aliases because the idiot installer is
>> now set to give the first user the machines name like pi or rock64. I
>> spent a month trying to fix user 1000 to be me instead of pi on the pi.
> On the Pi, this is what worked for me:
>
> 1. Add a new user (and add him to group sudo). This user gets ID 1001.
>     $ sudo adduser tempuser
>     $ sudo adduser tempuser sudo
>
> 2. Log out of user pi and log in as the newly created user.
>     
> 3. Delete user pi (pi must not have any processes running)
>     $ sudo deluser pi
>
> 4. Add the desired username:
>     $ sudo adduser gene


I just edited the password file directly, "vipw" and "vipw -s", and 
renamed the pi user.

regards,
chris

[toc] | [prev] | [next] | [standalone]

#190846

On Tue, Jan 09, 2018 at 03:04:03PM +0100, Christian Groessler wrote:
> On 01/09/18 04:49, Jason wrote:
> > > This I'd guess is important, if you have several users. I don't, except
> > > for amanda and nut, and thats only on this machine. All the rest have
> > > one user, me, known under various aliases because the idiot installer is
> > > now set to give the first user the machines name like pi or rock64. I
> > > spent a month trying to fix user 1000 to be me instead of pi on the pi.
> > On the Pi, this is what worked for me:
> > 
> > 1. Add a new user (and add him to group sudo). This user gets ID 1001.
> >     $ sudo adduser tempuser
> >     $ sudo adduser tempuser sudo
> > 
> > 2. Log out of user pi and log in as the newly created user.
> > 3. Delete user pi (pi must not have any processes running)
> >     $ sudo deluser pi
> > 
> > 4. Add the desired username:
> >     $ sudo adduser gene
> 
> 
> I just edited the password file directly, "vipw" and "vipw -s", and renamed
> the pi user.
> 
Don't forget about occurrences of 'pi' in the group files (use 'vigr'
and 'vigr -s' to catch those).

Regards,

-Roberto

-- 
Roberto C. Sánchez

[toc] | [prev] | [next] | [standalone]

#190850

On 01/09/18 16:01, Roberto C. Sánchez wrote:
> Don't forget about occurrences of 'pi' in the group files (use 'vigr'
> and 'vigr -s' to catch those).


Yep. Forgot to mention that.

regards,
chris

[toc] | [prev] | [next] | [standalone]

#190869

On 09.01.18 15:04, Christian Groessler wrote:
> I just edited the password file directly, "vipw" and "vipw -s", and renamed
> the pi user.

When doing that, there is merit in running pwck before any powerdown/reboot, 
as any illegality in a line stopped processing of all following when I
last tried mucking it up. (A good reason for the root entry to be first.)

And for vigr there's grpck.

That's all we had in the decades before the newfangled useradd stuff
came along.

Erik

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web