Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #195686
| From | Richard Owlett <rowlett@cloud85.net> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Running GParted and Synaptic without entering password |
| Date | 2018-05-13 21:50 +0200 |
| Message-ID | <vP5ai-6WM-9@gated-at.bofh.it> (permalink) |
| References | <vOZof-3u8-19@gated-at.bofh.it> <vP00W-3W2-31@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 05/13/2018 09:09 AM, tomas@tuxteam.de wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote:
>> The underlying problem is not understanding what I read concerning
>> sudo &/or /etc/sudoers (*INCLUDING* man pages).
>>
>> Only *ONE* individual has physical access to my _personal_ machine.
>> Therefore, any distinction between 'richard' and 'root' is
>> inherently artificial.
>
> Not so fast. A small flaw in your browser might allow it to run as
> you and try some shenanigan as root: you'd notice it by "something"
> asking for your credentials unexpectedly...
You have moths in your logic (cf.
https://en.wikipedia.org/wiki/Grace_Hopper):
Moth, the first:
When asked for unexpected permission, "Just say NO"
[If doubtful, then dirty ;]
Moth, the second:
What if I had been logged in as root?
>
>> The result I wish to achieve is to click on the icon for either
>> GParted or Synaptic *WITHOUT* being asked for a password (either
>> root's or user's).
>>
>> I've found vague hints that adding a line to my local /etc/sudoers file
>> such as
>> richard ALL = /usr/sbin/gparted , /usr/sbin/synaptic
>> would accomplish my goal.
>> Is that correct?
>>
>> Also my reading suggested that adding myself to sudoers group would
>> be required.
>>
>> This has an undesired side effect. I'm asked for my user password
>> instead of my root password. I currently have four different
>> installs of Debian each having an intentionally identical sets of
>> UID, GID, and passwords. No matter which install is active, if asked
>> for an admin
>> password I want it to be the 'root password'
>
> Assuming your desktop environment plays well along with sudo (I
> think the Gnome derivatives do, but I'll leave that answer to
> someone more versed in that) see the manpage for sudoers:
It was only a WAG (wild a????? guess) that sudo might be appropriate ;}
>
>
> User Authentication
> The sudoers security policy requires that most users
> authenticate themselves before they can use sudo. A password
> is not required if the invoking user is root, if the target
> user is the same as the invoking user, or if the policy has
> disabled authentication for the user or command. Unlike
> su(1), when sudoers requires authentication, it validates
> the invoking user's credentials, not the target user's (or
> root's) credentials. This can be changed via the rootpw,
> targetpw and runaspw flags, described later.
*ROFL*
That paragraph was one of the explicit reasons I wrote:> The underlying
problem is not understanding what I read concerning sudo
> &/or /etc/sudoers (*INCLUDING* man pages).
CAVEAT LECTORS:
I have a history of problems asking questions on this forum:
1. I prefer to ask narrowly focused questions.
That gets response "Tell us more".
2. If my original question has details, the responses I get can be
summed up by somebody's signature tag line -"Universal advice --
DON'T do that". [should that *ROFL* or "weep weep"?]
P.S. You have been saved from a plethora of bad puns.
P.P.S. I've read several articles on "how to ask questions".
None address my balancing act quandary ;/
*P.P.P.S.*
A definite thank you to all who attempt to answer my questions ;)
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-13 15:40 +0200
Re: Running GParted and Synaptic without entering password "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2018-05-13 16:20 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-13 21:50 +0200
Re: Running GParted and Synaptic without entering password Joe <joe@jretrading.com> - 2018-05-14 10:00 +0200
Re: Running GParted and Synaptic without entering password <tomas@tuxteam.de> - 2018-05-14 10:50 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-14 15:10 +0200
Re: Running GParted and Synaptic without entering password David Wright <deblis@lionunicorn.co.uk> - 2018-05-15 02:50 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-15 13:30 +0200
Re: Running GParted and Synaptic without entering password Curt <curty@free.fr> - 2018-05-15 14:50 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-15 16:10 +0200
Re: Running GParted and Synaptic without entering password David Wright <deblis@lionunicorn.co.uk> - 2018-05-15 19:00 +0200
Re: Running GParted and Synaptic without entering password Glenn English <ghe2001@gmail.com> - 2018-05-15 20:30 +0200
Re: Running GParted and Synaptic without entering password Joe <joe@jretrading.com> - 2018-05-16 11:30 +0200
Re: Running GParted and Synaptic without entering password "John Crawley (johnraff)" <john@bunsenlabs.org> - 2018-05-15 07:50 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-15 15:30 +0200
Re: Running GParted and Synaptic without entering password John Crawley <john@bunsenlabs.org> - 2018-05-16 07:40 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-16 09:50 +0200
Re: Running GParted and Synaptic without entering password <tomas@tuxteam.de> - 2018-05-13 16:20 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-13 21:50 +0200
Re: Running GParted and Synaptic without entering password David Wright <deblis@lionunicorn.co.uk> - 2018-05-14 03:30 +0200
Re: Running GParted and Synaptic without entering password Richard Hector <richard@walnut.gen.nz> - 2018-05-14 08:00 +0200
Re: Running GParted and Synaptic without entering password <tomas@tuxteam.de> - 2018-05-14 09:00 +0200
Re: Running GParted and Synaptic without entering password bw <bwtnguy@yahoo.com> - 2018-05-13 16:30 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-13 22:00 +0200
Re: Running GParted and Synaptic without entering password bw <bwtnguy@yahoo.com> - 2018-05-13 22:20 +0200
Re: Running GParted and Synaptic without entering password <tomas@tuxteam.de> - 2018-05-14 09:20 +0200
Re: Running GParted and Synaptic without entering password Richard Owlett <rowlett@cloud85.net> - 2018-05-14 15:40 +0200
Re: Running GParted and Synaptic without entering password Brian <ad44@cityscape.co.uk> - 2018-05-14 01:10 +0200
csiph-web