Reply
Thread Tools
Posts: 29 | Thanked: 2 times | Joined on Jan 2006
#1
the best way to get the full paths and such as root is.
be root.
edit /etc/sudoers
and put
user ALL=(ALL) NOPASSWD: ALL

then instead of sudo gainroot, just do su -
and the password is rootme.
 

The Following User Says Thank You to slackwaresupport For This Useful Post:
thoughtfix's Avatar
Posts: 832 | Thanked: 75 times | Joined on Dec 2005 @ Phoenix, AZ
#2
Originally Posted by slackwaresupport
the best way to get the full paths and such as root is.
be root.
edit /etc/sudoers
and put
user ALL=(ALL) NOPASSWD: ALL

then instead of sudo gainroot, just do su -
and the password is rootme.
There are some good reasons you want to keep root privs protected though. It's good sysadmin practice to just permit root access to specific needed commands.

Of course, it's going to be hard to break out of the "good sysadmin practice" and think "Hey - this isn't a server... just a tablet."
 
Posts: 29 | Thanked: 2 times | Joined on Jan 2006
#3
ya, and its your tablet, its not like there are 50 people loggin everyday.
 
Posts: 155 | Thanked: 10 times | Joined on Nov 2005 @ central georgia, usa
#4
NOT running as ROOT is religion. True disciples of the faith automatically sense a ROOT console and are compelled to vi /etc/inittab, making the default runlevel 6 to cause the unbeliever's system to reboot in perpetuity...

On a more serious note, I haven't seen anybody suggesting changing the ROOT password.

I can suggest a couple of simple alternatives to opening the 770 like a ... (well you may get the idea.)

1. create an alternative to gainroot that doesn't check R & D mode.
2. add the alternative to sudoers.

or

3. install dropbear-server and make it run at startup and use ssh (or puTTY from windows) to do "programming things." If you're hanging in windows, I highly recommend enabling scp (after installing the three dropbear packages...
ln -sf /var/lib/install/usr/bin/scp /usr/bin/scp)
and use WinSCP as a console to the 770.

$.02
 
Posts: 29 | Thanked: 2 times | Joined on Jan 2006
#5
i have been using linux for around 11 years now, and its all i run, i have 0 window machines at home and work. so i know all about the ins and outs. and im a system administrator so i know about security. and changing the root pass was the first thing i did, after getting root. and i have openssh running instead of dropbear.. anyone know of a vncserver ?
 
Hedgecore's Avatar
Posts: 1,361 | Thanked: 115 times | Joined on Oct 2005 @ Toronto, Ontario, Canada
#6
I started on Slack in '96... Have you experimented with ARMedSlack?
 
Posts: 29 | Thanked: 2 times | Joined on Jan 2006
#7
i have looked at it. but havent had time to fire it up .
 
Nyrath's Avatar
Posts: 92 | Thanked: 50 times | Joined on Jan 2006 @ the praeternatural tower
#8
Originally Posted by slackwaresupport
ya, and its your tablet, its not like there are 50 people loggin everyday.
Yet.

The day will come when the 770 or the next version will become vulnerable to some kind of port-scan attack, and you don't want your tablet running as root when it happens.

The best way to ensure that is to form good habits now.
 
Posts: 155 | Thanked: 10 times | Joined on Nov 2005 @ central georgia, usa
#9
Originally Posted by Nyrath
Yet.

The day will come when the 770 or the next version will become vulnerable to some kind of port-scan attack, and you don't want your tablet running as root when it happens.

The best way to ensure that is to form good habits now.
Good habits. YES.

Running as ROOT.. 770 specific answer? When I do xterm/ whoami, I get user (when r&d mode is enabled)

When I signon as root from SSH on another machine, I am root.

When I sudo gainroot, whoami indicates root.

Here's what happens then:

"#!/bin/sh -e
trap exit SIGHUP SIGINT SIGTERM
PATH=/bin:/usr/bin:/sbin:/usr/sbin
MODE=`/usr/sbin/chroot /mnt/initfs cal-tool --get-rd-mode`
if [ x$MODE = xenabled ]
then
echo "Root shell enabled"
/bin/sh
else
echo "Enable RD mode if you want to break your device"
fi"

This looks like a check to the "flash" part of the 770 to see if we're in R & D mode.

Then "if r & D mode," we run sh

How is a port-scan attack more effective when the tablet is "running" as root?

sudo has been two things: 1. a way to limit who does what 2. a way to log who does what

I haven't seen any logs retained on my 770.

Last edited by putkowski; 2006-01-18 at 01:15.
 
Posts: 66 | Thanked: 3 times | Joined on Dec 2005
#10
ok, so I corrupted sudoers and sudo gainroot fails. with
>>> SUDOERS file: parse error line 22 <<<
>>> SUDOERS file: parse error line 23 <<<
sudo: parse error in /etc/sudoers near line 22

gainroot is the trimmed down version w/o the check for r & d.

The lines effected are NOT the lines that allow gainroot.

sshd is intsalled.

Brick? or do I have options? Bricks not a problem. I can redo everything with much less hunt and peck. I just want to know what my options are.

-Jason
__________________
maps.i40.com - Google maps sized for the 770 @ 150% - scroll below the map for features
ukmaps.i40.com - Google UK maps - Pan and Zoom only.
wiki.i40.com/Nokia770 - Random Nokia 770 notes.
 
Reply

Thread Tools

 
Forum Jump


All times are GMT. The time now is 22:03.