Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Tue 21 Nov 2017, 01:01
All times are UTC - 4
 Forum index » Taking the Puppy out for a walk » Announcements
Real men run as root
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 3 [35 Posts]   Goto page: 1, 2, 3 Next
Author Message
Emeritus

Joined: 17 Mar 2017
Posts: 2

PostPosted: Fri 17 Mar 2017, 23:38    Post subject:  Real men run as root  

Is Puppy still run as root?
There is a report on Gentoo forums about successful break-in into a computer ran as root.
Methinks the times when Linux was relatively secure to be run as root are over, for good.
Back to top
View user's profile Send private message 
musher0


Joined: 04 Jan 2009
Posts: 11167
Location: Gatineau (Qc), Canada

PostPosted: Sat 18 Mar 2017, 00:07    Post subject:  

Hello Emeritus.

Oh, I think in this forum we've been touching on this subject every 28
days. It's like PMS, IMO. Now it's your turn to have cramps... Rolling Eyes

Do a search with the forum search engine, the answers to your question
are already there.

As former member and Puppy developer gposil once said (or something
like it), about six years ago:

"If you think running Puppy as root is a risk,
don't use it."


Regards nevertheless.

_________________
musher0
~~~~~~~~~~
"Logical entities must not be multiplied beyond necessity." | |
« Il ne faut pas multiplier les entités logiques sans nécessité. » (Ockham)
Back to top
View user's profile Send private message 
slavvo67

Joined: 12 Oct 2012
Posts: 1425
Location: The other Mr. 305

PostPosted: Sat 18 Mar 2017, 00:12    Post subject:  

I've actually started moving my browsers to Spot. Why? Eh, why not?

It's there... it has no noticeable negative affect and those pesky Chromium, Chrome, Iron, etc. sandbox issues seemed to go away....

Not afraid of running Root but I'm pretty happy with my browsers running via Spot.
Back to top
View user's profile Send private message 
Emeritus

Joined: 17 Mar 2017
Posts: 2

PostPosted: Sat 18 Mar 2017, 00:48    Post subject:  

Yes I think running as root is a risk. And this risk is increasing. The Gentoo computer that got owned wasn't taken over by a Windows virus. It was a piece of badware targeting Linux systems and it successfully encrypted user files.
The world is changing and IMHO you are hiding your head in the sand.
Back to top
View user's profile Send private message 
drunkjedi


Joined: 24 May 2015
Posts: 684

PostPosted: Sat 18 Mar 2017, 01:02    Post subject:  

Got link to that break in report?
Back to top
View user's profile Send private message 
slavvo67

Joined: 12 Oct 2012
Posts: 1425
Location: The other Mr. 305

PostPosted: Sat 18 Mar 2017, 01:19    Post subject:  

All my important items are backed-up in 3 places, so I have little concern for such but I'm careful where I go and what I add to my machines.
Back to top
View user's profile Send private message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 12699
Location: Arizona USA

PostPosted: Sat 18 Mar 2017, 11:39    Post subject:  

Emeritus wrote:
...The Gentoo computer that got owned wasn't taken over by a Windows virus. It was a piece of badware targeting Linux systems and it successfully encrypted user files....

Was this Gentoo computer that got broken into running as root? That's what we're discussing here.
Back to top
View user's profile Send private message 
fredx181


Joined: 11 Dec 2013
Posts: 2588
Location: holland

PostPosted: Sat 18 Mar 2017, 13:30    Post subject:  

It's here discussed, I guess:
https://forums.gentoo.org/viewtopic-p-8044710.html?sid=9410da598ca2837d71d4a35e54e25294

Caused by browsing the net as root or... Question

Fred

_________________
Dog Linux website
Back to top
View user's profile Send private message 
rufwoof

Joined: 24 Feb 2014
Posts: 2163

PostPosted: Sat 18 Mar 2017, 13:53    Post subject:  

Having moved over from DebianDog to a more pure form of Debian frugal ... and it was a right PIA at first. Kept hitting permissions failures after making edits - 'annoying' to put it politely.

After a while however and it became second nature. Clickable link/icon to open a root terminal. Right click option in PCmanFM to open as root. All the rest run under 'user'.

Some programs such as VLC, Pulse Audio ...etc. don't like to be run as root. You can fix that, at least for VLC with a relatively simple edit however. Many of the weaknesses of running as root equate to the risk of a local escalation of 'privileges risk' ... but if you can already easily access root anyway and just use your box as a single user box, those risks are immaterial.

Running a browser as user is a good idea IMO. As the browser is the more likely point of entry/weakness. Puppy (or other frugal boot alternatives such as the Debian frugal I run) that can be shutdown with no saving of changes however is a barrier to deeper level breaches/trojans. Such that one of Puppy's weaknesses (if you want to consider running as root as being such), is offset by one of its strengths (frugally booted).
Back to top
View user's profile Send private message 
jamesbond

Joined: 26 Feb 2007
Posts: 3075
Location: The Blue Marble

PostPosted: Sat 18 Mar 2017, 14:10    Post subject:  

Most importantly is **don't** run network programs with the same user account that keeps your data.

Explanations here: http://distro.ibiblio.org/fatdog/web/faqs/login.html.

_________________
Fatdog64, Slacko and Puppeee user. Puppy user since 2.13.
Contributed Fatdog64 packages thread.
Back to top
View user's profile Send private message 
step

Joined: 04 May 2012
Posts: 950

PostPosted: Sat 18 Mar 2017, 14:46    Post subject:  

jamesbond wrote:
Most importantly is **don't** run network programs with the same user account that keeps your data.

Including wine network programs (wine-HQ recommend not to run wine as root at all).

_________________
Fatdog64-710|+Packages|Kodi|Findnrun|+forum|gtkmenuplus
Back to top
View user's profile Send private message 
fredx181


Joined: 11 Dec 2013
Posts: 2588
Location: holland

PostPosted: Sat 18 Mar 2017, 15:21    Post subject:  

jamesbond wrote:
Most importantly is **don't** run network programs with the same user account that keeps your data.


Do I understand well?:
All the files and folders (almost) on all the partitions of my computer are owned by root, also I'm logged-in as root, so I better should browse the net as another user, not as root?

Fred

_________________
Dog Linux website
Back to top
View user's profile Send private message 
tallboy


Joined: 21 Sep 2010
Posts: 813
Location: Oslo, Norway

PostPosted: Sun 19 Mar 2017, 00:36    Post subject:  

I have always been root. But I guess running live with no savefile put me in a different league...
_________________
True freedom is a live Puppy on a multisession CD/DVD.
Back to top
View user's profile Send private message 
dancytron

Joined: 18 Jul 2012
Posts: 938

PostPosted: Sun 19 Mar 2017, 00:52    Post subject:  

fredx181 wrote:
jamesbond wrote:
Most importantly is **don't** run network programs with the same user account that keeps your data.


Do I understand well?:
All the files and folders (almost) on all the partitions of my computer are owned by root, also I'm logged-in as root, so I better should browse the net as another user, not as root?

Fred


From reading Jamesbond's posts in the past, I think his point is that no matter what user you are running as, for maximum security, you should browse as a different user.

So if you are running as a normal user, you should still use a different user to browse, since even if your normal user doesn't have root access it still has access to your data and your data is what is important.

Hopefully he'll correct me if I've completely misunderstood him.
Back to top
View user's profile Send private message 
bigpup


Joined: 11 Oct 2009
Posts: 9517
Location: Charleston S.C. USA

PostPosted: Sun 19 Mar 2017, 03:29    Post subject:  

About root, spot and fido
http://barryk.org/puppylinux/technical/root.htm

_________________
I have found, in trying to help people, that the things they do not tell you, are usually the clue to solving the problem.
When I was a kid I wanted to be older.... This is not what I expected Shocked
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 3 [35 Posts]   Goto page: 1, 2, 3 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Taking the Puppy out for a walk » Announcements
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0569s ][ Queries: 12 (0.0053s) ][ GZIP on ]