Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #207051
| From | David Wright <deblis@lionunicorn.co.uk> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: 'synaptic' removed from buster |
| Date | 2019-04-05 22:20 +0200 |
| Message-ID | <xJDtE-35u-3@gated-at.bofh.it> (permalink) |
| References | (5 earlier) <xJqG6-3uO-3@gated-at.bofh.it> <xJqPL-3yr-3@gated-at.bofh.it> <xJrLP-48y-1@gated-at.bofh.it> <xJtNE-5n9-3@gated-at.bofh.it> <xJu6Z-5JK-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Fri 05 Apr 2019 at 11:07:42 (+0100), mick crane wrote:
> On 2019-04-05 10:51, tomas@tuxteam.de wrote:
> > On Fri, Apr 05, 2019 at 08:43:32AM +0100, mick crane wrote:
> > > On 2019-04-05 07:46, tomas@tuxteam.de wrote:
> > > >On Fri, Apr 05, 2019 at 07:37:05AM +0100, mick crane wrote:
> > > >
> > > >[...]
> > > >
> > > >>Making you be root to download stuff off the internet never seemed
> > > >>like a good idea.
> > > >
> > > >And letting "you" (not root) install things in system directories
> > > >(/usr/bin et al) seems to be as bad an idea [...]
> >
> > [...]
> >
> > > what's the issue with
> > > seeing what's available as you,
> > > checking what you need as root,
> > > downloading as you,
> > > install as root.
>From this and other posts of yours, you seem to feel very vulnerable
when connected to anywhere outside your system, as if you're under
a man-in-the-middle attack all the time.
If your user account is compromised through, say, unwise browsing of
the web, then downloading packages/checksums as user will make for
far greater vulnerability, and root could end up installing all sorts
of bogus stuff.
> > Imagine some random javascript (running as you, the "normal" user
> > starts doing system things (browser sandboxing? nah!). At this point
> > I'd hope I get asked for my password, to get a chance to stop the
> > whole shenanigan. But that's just me...
>
> well normal user isn't supposed to do system things. Sudo makes me
> nervous.
Let's take a real scenario. You've sent some largish emails, and are
impatient to close down the machine. How do you find out whether your
emails have actually left your system? Two easy ways: see if material
is still queued, or check exim's log. Two problems: /var/spool/exim4
can't be read at all (Debian-exim required) and neither can
/var/log/exim4 (adm required).
You can fix the latter by being included in adm. Now you can see
which have left the machine, and you *might* notice emails that failed
if there's not too much traffic. OTOH you don't want to be included in
Debian-exim and be able to read/interfere with/delete emails, but need
to see the spool.
A solution is for root to add lines like:
Cmnd_Alias EMAILQUEUED = /bin/ls -lR /var/spool/exim4/
ME MYHOSTS = (EMAIL) EMAILQUEUED
## who where = (as_whom) what
to a file like /etc/sudoers.d/foo so that you (defined as ME) can
run that specific command as Debian-exim (EMAIL) on given hosts.
Now, a bash function can be defined to handle all the typing for
you (as user):
my-q ()
{
[ -n "$1" ] && printf '%s\n' "Usage: $FUNCNAME
checks the outbound mail queue." 1>&2 && return 1;
ps -p $(pgrep exim4);
sudo -u Debian-exim ls -lR /var/spool/exim4/
}
$ my-q
Cheers,
David.
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
'synaptic' removed from buster David <bouncingcats@gmail.com> - 2019-04-04 13:00 +0200
Re: 'synaptic' removed from buster "Alexander V. Makartsev" <avbetev@gmail.com> - 2019-04-04 13:00 +0200
Re: 'synaptic' removed from buster Brad Rogers <brad@fineby.me.uk> - 2019-04-04 13:40 +0200
Re: 'synaptic' removed from buster Francisco M Neto <fmneto@fmneto.com.br> - 2019-04-04 14:50 +0200
Re: 'synaptic' removed from buster Curt <curty@free.fr> - 2019-04-04 15:00 +0200
Re: 'synaptic' removed from buster Jonathan Dowland <jmtd@debian.org> - 2019-04-05 17:10 +0200
Re: 'synaptic' removed from buster Reco <recoverym4n@enotuniq.net> - 2019-04-05 17:50 +0200
Re: 'synaptic' removed from buster Lee <ler762@gmail.com> - 2019-04-05 23:10 +0200
Re: 'synaptic' removed from buster Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-04-06 00:40 +0200
Re: 'synaptic' removed from buster Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-04-06 01:00 +0200
Re: 'synaptic' removed from buster David <bouncingcats@gmail.com> - 2019-04-06 01:50 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-06 04:40 +0200
Re: 'synaptic' removed from buster Jonathan Dowland <jmtd@debian.org> - 2019-04-06 09:50 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-10 18:10 +0200
Re: 'synaptic' removed from buster Nazar Zhuk <nazar@zhuk.online> - 2019-04-11 00:40 +0200
Re: 'synaptic' removed from buster Lee <ler762@gmail.com> - 2019-04-11 01:50 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-11 05:30 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-11 05:20 +0200
Re: 'synaptic' removed from buster Nazar Zhuk <nazar@zhuk.online> - 2019-04-11 21:00 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-11 22:30 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-06 15:10 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-09 22:10 +0200
Re: 'synaptic' removed from buster Curt <curty@free.fr> - 2019-04-06 10:10 +0200
Re: 'synaptic' removed from buster Joe <joe@jretrading.com> - 2019-04-06 10:50 +0200
Re: 'synaptic' removed from buster David <bouncingcats@gmail.com> - 2019-04-06 11:00 +0200
Re: 'synaptic' removed from buster Dominic Knight <dominicknight@gmx.com> - 2019-04-06 12:40 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-09 22:10 +0200
Re: 'synaptic' removed from buster rhkramer@gmail.com - 2019-04-06 14:10 +0200
Re: 'synaptic' removed from buster Curt <curty@free.fr> - 2019-04-06 15:00 +0200
Re: 'synaptic' removed from buster Greg Wooledge <wooledg@eeg.ccf.org> - 2019-04-08 14:30 +0200
Re: 'synaptic' removed from buster Jan Claeys <lists@janc.be> - 2019-04-06 14:50 +0200
Re: 'synaptic' removed from buster Reco <recoverym4n@enotuniq.net> - 2019-04-04 15:10 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-04 16:20 +0200
Re: 'synaptic' removed from buster Reco <recoverym4n@enotuniq.net> - 2019-04-04 18:00 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-04 21:30 +0200
Re: 'synaptic' removed from buster Ric Moore <wayward4now@gmail.com> - 2019-04-06 20:30 +0200
Re: 'synaptic' removed from buster Joe <joe@jretrading.com> - 2019-04-04 19:40 +0200
Re: 'synaptic' removed from buster Reco <recoverym4n@enotuniq.net> - 2019-04-04 19:50 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-04 21:50 +0200
Re: 'synaptic' removed from buster Greg Wooledge <wooledg@eeg.ccf.org> - 2019-04-04 22:00 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-04 22:20 +0200
Re: 'synaptic' removed from buster Greg Wooledge <wooledg@eeg.ccf.org> - 2019-04-04 22:30 +0200
Re: 'synaptic' removed from buster Jonathan Dowland <jmtd@debian.org> - 2019-04-05 17:10 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-05 20:30 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-06 05:20 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-06 15:30 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-09 22:40 +0200
Re: 'synaptic' removed from buster Jan Claeys <lists@janc.be> - 2019-04-05 21:40 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-05 22:40 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-05 22:40 +0200
Re: 'synaptic' removed from buster Jan Claeys <lists@janc.be> - 2019-04-06 15:00 +0200
Re: 'synaptic' removed from buster Doug <dmcgarrett@optonline.net> - 2019-04-06 01:30 +0200
Re: 'synaptic' removed from buster Jonathan Dowland <jmtd@debian.org> - 2019-04-05 17:10 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 08:40 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-05 08:50 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 09:50 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-05 12:00 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 12:20 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-05 12:30 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-05 13:40 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 13:50 +0200
Re: 'synaptic' removed from buster <tomas@tuxteam.de> - 2019-04-05 14:10 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 13:40 +0200
Re: 'synaptic' removed from buster David Wright <deblis@lionunicorn.co.uk> - 2019-04-05 22:20 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-06 03:10 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-05 11:10 +0200
Re: 'synaptic' removed from buster mick crane <mick.crane@gmail.com> - 2019-04-05 12:00 +0200
Re: 'synaptic' removed from buster Brad Rogers <brad@fineby.me.uk> - 2019-04-04 15:50 +0200
Re: 'synaptic' removed from buster Francisco M Neto <fmneto@fmneto.com.br> - 2019-04-05 15:30 +0200
Re: 'synaptic' removed from buster David <bouncingcats@gmail.com> - 2019-04-05 15:40 +0200
Re: 'synaptic' removed from buster Francisco M Neto <fmneto@fmneto.com.br> - 2019-04-05 17:30 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-05 19:50 +0200
Re: 'synaptic' removed from buster Charlie <taoquester@gmail.com> - 2019-04-06 00:40 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-04 15:00 +0200
Re: 'synaptic' removed from buster Curt <curty@free.fr> - 2019-04-04 14:30 +0200
Re: 'synaptic' removed from buster David <bouncingcats@gmail.com> - 2019-04-04 16:40 +0200
Re: 'synaptic' removed from buster Richard Owlett <rowlett@cloud85.net> - 2019-04-05 14:50 +0200
Re: 'synaptic' removed from buster Andy Smith <andy@strugglers.net> - 2019-04-05 20:40 +0200
Re: 'synaptic' removed from buster Richard Owlett <rowlett@cloud85.net> - 2019-04-05 21:30 +0200
Re: 'synaptic' removed from buster Gene Heskett <gheskett@shentel.net> - 2019-04-04 15:00 +0200
csiph-web