[opensuse] User permission problems - plz help! - openSUSE Users

[opensuse] User permission problems - plz help!

Alexey Eremenko

23 Mar 2007 23 Mar '07

20:23

hi Susers ! I installed a openSUSE 10.2 some while ago. I have had some problems, so I created a new user, and deleted the original one. The problems I have now, due to this move: In KDE, when I do Start->Leave I can only end session, not shutdown, not restart In K3B, I cannot write anything, is it does NOT recognizes my new DVD-RW. Under "root" account everything works ! Other priviledge problem, that I would like to solve: Why simple utilities, such as ifconfig and traceroute require root priviledges ? Or more correctly, they *do* run under normal user, but are not included on the normal user path by default. Why is that? -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Show replies by date

Carlos E. R.

23 Mar 23 Mar

23:10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2007-03-23 at 22:23 +0200, Alexey Eremenko wrote:

...

I have had some problems, so I created a new user, and deleted the original one.

The problems I have now, due to this move: In KDE, when I do Start->Leave I can only end session, not shutdown, not restart In K3B, I cannot write anything, is it does NOT recognizes my new DVD-RW.

Under "root" account everything works !

I don't know about that one. Perhaps you copied over some files from one user to the other?

...

Other priviledge problem, that I would like to solve: Why simple utilities, such as ifconfig and traceroute require root priviledges ?

Or more correctly, they *do* run under normal user, but are not included on the normal user path by default. Why is that?

I can think of two reasons. One, is the assumption that Mr Root is the only one with knowledge to use Certain Things. Also, he is the one responsible for the machine to the external world, and tools like traceroute could perhaps cause damage to others. Perhaps its designer thinks that if you know how to add the path, then are a responsible enough user ;-) Some tools, like ping, permit root do things that they don't allow normal users. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGBF5ntTMYHG2NR9URAhHiAJ40MPP8b4S3Cbt5G8xptFGaxvaK6ACeNgP0 FauWuLt4v3vgGUP2D7Q7wRw= =KtwS -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

24 Mar 24 Mar

10:44

On 3/24/07, Carlos E. R. wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

The Friday 2007-03-23 at 22:23 +0200, Alexey Eremenko wrote:

...
I have had some problems, so I created a new user, and deleted the original one.

The problems I have now, due to this move: In KDE, when I do Start->Leave I can only end session, not shutdown, not restart In K3B, I cannot write anything, is it does NOT recognizes my new DVD-RW.

Under "root" account everything works !

I don't know about that one. Perhaps you copied over some files from one user to the other?

So, anybody knows how-to make my DVD-RW accessible from user again, without reinstalling openSUSE (like in Windows) ? BTW: Automount doesn't works too.... Now I have to enter root account and manually do: mount /dev/cdrom /mnt/cdrom Very unpleseable experience...

...

...
Other priviledge problem, that I would like to solve: Why simple utilities, such as ifconfig and traceroute require root priviledges ?

Or more correctly, they *do* run under normal user, but are not included on the normal user path by default. Why is that?

I can think of two reasons. One, is the assumption that Mr Root is the only one with knowledge to use Certain Things. Also, he is the one responsible for the machine to the external world, and tools like traceroute could perhaps cause damage to others. Perhaps its designer thinks that if you know how to add the path, then are a responsible enough user ;-)

Some tools, like ping, permit root do things that they don't allow normal users.

Very funny, but I disagree with this stance, and will fill a bug. -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos E. R.

11:00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2007-03-24 at 12:44 +0200, Alexey Eremenko wrote:

...

So, anybody knows how-to make my DVD-RW accessible from user again, without reinstalling openSUSE (like in Windows) ?

Not enough clues, sorry. Try a new user, different name, without deleting the other one. Maybe new user doesn't belong to the necesary groups. Read the logs.

...

BTW: Automount doesn't works too.... Now I have to enter root account and manually do: mount /dev/cdrom /mnt/cdrom

Add user to the options in the fstab line.

...

...
I can think of two reasons. One, is the assumption that Mr Root is the only one with knowledge to use Certain Things. Also, he is the one responsible for the machine to the external world, and tools like traceroute could perhaps cause damage to others. Perhaps its designer thinks that if you know how to add the path, then are a responsible enough user ;-)

Some tools, like ping, permit root do things that they don't allow normal users.

Very funny, but I disagree with this stance, and will fill a bug.

Ask first in the security list. It has been that way for generations... your "bug" will not be considered a bug by "the stablishment" :-p - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGBQTstTMYHG2NR9URAtszAKCUmgi0Ja9zhmP+63tife6X1qKh1wCff/Ll SCVOstSaShdzYkGNh52uyT0= =rkvT -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Darryl Gregorash

12:50

On 2007-03-24 04:44, Alexey Eremenko wrote:

...

<snip>

...
...
In KDE, when I do Start->Leave I can only end session, not shutdown, not

Don't know about this one.

...
...
restart In K3B, I cannot write anything, is it does NOT recognizes my new DVD-RW. Add the user to group "cdrom". <snip>

...
Why simple utilities, such as ifconfig and traceroute require root priviledges ?

Or more correctly, they *do* run under normal user, but are not included on the normal user path by default. Why is that? They are in /sbin/ which is not included in an ordinary user's path. Make symlinks to them in ~/bin/, which should be in any user's path.

Some tools, like ping, permit root do things that they don't allow normal users.

Very funny, but I disagree with this stance, and will fill a bug. I don't know what root can do with ping that no one else can do, but I can think of very valid reasons why an ordinary user should not be able to do a lot of the things that ifconfig can do :-)

-- Moral indignation is jealousy with a halo. -- HG Wells -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Anders Johansson

13:03

On Saturday 24 March 2007 13:50, Darryl Gregorash wrote:

...

I don't know what root can do with ping that no one else can do

Ping flooding, for one thing. See the -f and -l parameters -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

13:17

About lack of DVD privileges:

...

Add the user to group "cdrom". Added, restarted, didn't help... (BTE: should I restart, init 6, or just logout after priviledges change?)

The Operating system sees my CD/DVD fully, that is, if I launch K3B from root account, it detects my DVD-RW.

...

From user account K3B cannot detect the DVD-RW, but "eject" utility works even from normal user account !

About KDE shutdown:

...

I think there is a setting in Yast->local security that handles this.

I have tried to play with this settings, I setup my PC as Networked Workstation, and also : In KDE Control Center->KDE Components->General->Offer Shutdown options checkbox is enabled. Thanks so far so fast response... but any ideas? -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

13:23

OK, I will provide some more info on my setup: suser@localhost:~> cat /etc/fstab /dev/hdd3 / ext3 acl,user_xattr 1 1 /dev/hdd1 /C vfat users,gid=users,umask=0002,utf8=true 0 0 /dev/hdd5 /D ntfs ro,users,gid=users,umask=0002,nls=utf8 0 0 /dev/hdd6 /E vfat users,gid=users,umask=0002,utf8=true 0 0 /dev/hdd9 /home ext3 defaults 1 2 /dev/hdd8 swap swap defaults 0 0 proc /proc proc defaults 0 0 sysfs /sys sysfs noauto 0 0 debugfs /sys/kernel/debug debugfs noauto 0 0 devpts /dev/pts devpts mode=0620,gid=5 0 0 /tmp/app/1/image /tmp/app/1 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/2/image /tmp/app/2 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/3/image /tmp/app/3 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/4/image /tmp/app/4 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/5/image /tmp/app/5 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/6/image /tmp/app/6 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 /tmp/app/7/image /tmp/app/7 cramfs,iso9660 user,noauto,ro,loop,exec 0 0 usbfs /proc/bus/usb usbfs rw,devgid=1001,devmode=0660,busgid=1001,busmode=0770,listgid=1001,listmode=0660 0 0 ================================================ According to Yast, suser user is part of the following groups: users vboxusers audio cdrom dialout video Is there something else that I missed? Thanks in advance -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos E. R.

15:49

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2007-03-24 at 15:17 +0200, Alexey Eremenko wrote:

...

About lack of DVD privileges:

...
Add the user to group "cdrom". Added, restarted, didn't help... (BTE: should I restart, init 6, or just logout after priviledges change?)

just logout.

...

Thanks so far so fast response... but any ideas?

Logs. Try diferent desktop. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGBUhytTMYHG2NR9URAvRoAJ9fpHTsd4bbdb1WeLYk6JLbOlMt+gCcCvVA Vm3IbfG2hGgoOXCd6a4/ykY= =pRE7 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Darryl Gregorash

19:06

On 2007-03-24 07:03, Anders Johansson wrote:

...

On Saturday 24 March 2007 13:50, Darryl Gregorash wrote:

...
I don't know what root can do with ping that no one else can do

Ping flooding, for one thing. See the -f and -l parameters ^^^^^^^^^^^^^

You bad boy!! :-) -- Moral indignation is jealousy with a halo. -- HG Wells -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos E. R.

23:31

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2007-03-24 at 13:06 -0600, Darryl Gregorash wrote:

...

...
Ping flooding, for one thing. See the -f and -l parameters ^^^^^^^^^^^^^

You bad boy!! :-)

There are perfectly reasonable reasons to use it; for instance, I do for measuring network bandwidth - in my network, of course. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGBbTdtTMYHG2NR9URAt3JAJ4zSjTRBKSZNK5KOq9cwIsvoHoGKwCeOUr5 KYCInhiwBgTArv6uKw5eC3A= =MCHW -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

27 Mar 27 Mar

19:48

So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos E. R.

22:52

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2007-03-27 at 21:48 +0200, Alexey Eremenko wrote:

...

So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

No, I don't use that feature. But I seem to remember seeing settings in kde control somewhere as to whom allow to close the system. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGCaAmtTMYHG2NR9URAi1aAJ9/c0a6gK5Bh6BK5u6HA5hoUVKwvQCdEUe5 hiAujcnFMwlnpuZiBFePrEc= =mgPs -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Randall R Schulz

23:26

Alexey, On Tuesday 27 March 2007 12:48, Alexey Eremenko wrote:

...

So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

You can set this up in the KDE Control Center: KDE Menu -> KDE Control Center -> System Administration -> Login Manager Activate Administrator Mode using button at bottom of window -> Shutdown (tab) Allow Shutdown: local: <Everybody> (from pop-up menu) Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

28 Mar 28 Mar

17:41

On 3/28/07, Randall R Schulz wrote:

...

Alexey,

On Tuesday 27 March 2007 12:48, Alexey Eremenko wrote:

...
So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

You can set this up in the KDE Control Center:

KDE Menu -> KDE Control Center -> System Administration -> Login Manager Activate Administrator Mode using button at bottom of window -> Shutdown (tab) Allow Shutdown: local: <Everybody> (from pop-up menu)

Randall Schulz

I did this, but it doesn't helps ! -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Martin J Hooper

17:48

Alexey Eremenko wrote:

...

On 3/28/07, Randall R Schulz wrote:

...
Alexey,

On Tuesday 27 March 2007 12:48, Alexey Eremenko wrote:

...
So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

You can set this up in the KDE Control Center:

KDE Menu -> KDE Control Center -> System Administration -> Login Manager Activate Administrator Mode using button at bottom of window -> Shutdown (tab) Allow Shutdown: local: <Everybody> (from pop-up menu)

Randall Schulz

I did this, but it doesn't helps !

Are you running in Runlevel 5? Do you have a graphical login? (Which is the same thing.) YOu can only shutdown and restart when you have a graphical login not when yoiu run startx -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Don Raboud

17:54

On Wednesday 28 March 2007 11:41, Alexey Eremenko wrote:

...

On 3/28/07, Randall R Schulz wrote:

...
Alexey,

On Tuesday 27 March 2007 12:48, Alexey Eremenko wrote:

...
So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

You can set this up in the KDE Control Center:

KDE Menu -> KDE Control Center -> System Administration -> Login Manager Activate Administrator Mode using button at bottom of window -> Shutdown (tab) Allow Shutdown: local: <Everybody> (from pop-up menu)

Randall Schulz

I did this, but it doesn't helps !

I haven't been following this thread too closely, and I apologize in advance if this is repeat information, but have you tried YaST -> Security and Users -> Local Security [ choose custom Settings ] next -> next and there are options for the Shutdown Behavior of KDM. I have mine set on Automatic and can shut down from KDE as a regular user. -- Don -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Alexey Eremenko

18:12

...

Are you running in Runlevel 5? Do you have a graphical login?

Yes, I am. Autostarting from KDM. On 3/28/07, Don Raboud wrote:

...

On Wednesday 28 March 2007 11:41, Alexey Eremenko wrote:

...
On 3/28/07, Randall R Schulz wrote:

...
Alexey,

On Tuesday 27 March 2007 12:48, Alexey Eremenko wrote:

...
So, do you have any idea how to setup KDE to be able shutdown/restart instead of only logging off ?

You can set this up in the KDE Control Center:

KDE Menu -> KDE Control Center -> System Administration -> Login Manager Activate Administrator Mode using button at bottom of window -> Shutdown (tab) Allow Shutdown: local: <Everybody> (from pop-up menu)

Randall Schulz

I did this, but it doesn't helps !

I haven't been following this thread too closely, and I apologize in advance if this is repeat information, but have you tried

YaST -> Security and Users -> Local Security [ choose custom Settings ] next -> next

and there are options for the Shutdown Behavior of KDM. I have mine set on Automatic and can shut down from KDE as a regular user.

I have set my PC to be "Networked Workstation" In Yast, not custom, but I will try custom too... -- -Alexey Eremenko "Technologov" -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Toshi Esumi

24 Mar 24 Mar

04:29

On Fri, 2007-03-23 at 22:23 +0200, Alexey Eremenko wrote:

...

Other priviledge problem, that I would like to solve: Why simple utilities, such as ifconfig and traceroute require root priviledges ?

I think you just don't have PATH to the commands. Try full path like: /usr/sbin/traceroute 4.2.2.2 If it works, then check "echo $PATH". Toshi -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

6246

Age (days ago)

6251

Last active (days ago)

List overview

Download

18 comments

8 participants

participants (8)

Alexey Eremenko
Anders Johansson
Carlos E. R.
Darryl Gregorash
Don Raboud
Martin J Hooper
Randall R Schulz
Toshi Esumi