Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 31 Jul 2014, 15:48
All times are UTC - 4
 Forum index » House Training » Beginners Help ( Start Here)
Why does Puppy run in root?
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 4 of 4 [48 Posts]   Goto page: Previous 1, 2, 3, 4
Author Message
PaulBx1

Joined: 16 Jun 2006
Posts: 2308
Location: Wyoming, USA

PostPosted: Wed 14 Jan 2009, 16:17    Post subject:  

OK, I'm the paranoid guy around here - it was my nagging that got Barry to allow encrypted pupsaves, etc.

And yet, I still don't see the need to run as other than root - in a desktop/laptop/workstation!

OK, it makes some sense when you are a system admin and 100 users depend on you not screwing up. Any added layer of "be careful" might save your job.

But I don't know how many explanations I've read about people having to hack into a user name and user password and finally root password to get su or sudo access as being more secure than just a root password - nonsense! If you want security, cook yourself up a good root password. There is no example of username/password//rootpassword so secure that it cannot be trumped by simply adding more security in a root password by itself.

BTW, are passwords really only limited to 8 characters? Mine has more - are the last characters ignored? If we have an 8-character limit, then THAT is the big security hole in Puppy, not the fact that we run as root.

It might make sense for Puppy to require a root password as default though, rather than having root the password completely turned off. Then if people insist on no password for root they can always do that, but the default condition is more secure.

But maybe I'm just being more paranoid than I need to be. It's happened before. Rolling Eyes

I have noticed that in reviews of Puppy, the big thing that people rag on is running as root. Oh, well. Can't please everyone...
Back to top
View user's profile Send private message 
Bruce B


Joined: 18 May 2005
Posts: 11080
Location: The Peoples Republic of California

PostPosted: Wed 14 Jan 2009, 18:59    Post subject:  

PaulBx1 wrote:

OK, it makes some sense when you are a system admin and 100 users depend on you not screwing up. Any added layer of "be careful" might save your job.


I suppose the biggest real enterprise players are RedHat, Suse, Fedora and Centos. In terms of the big four, I think that's accurate.

What I know is accurate is; they have traditional root accounts.

Suppose we want to do one thing and one thing only. We want to perform daily backups at 2:00 AM.

Are we actually going to pay a person to type in commands to do this, at that hour?

Can Ubuntu sudo run all by its lonesome and make this daily backup?

If so, where is the extra safety? A computer doing things at root access level and not a human being around to tell it to start, continue or stop?

If it can't do things at high permission levels; meaning start, continue and stop, when no human is around, where is the enterprise value?

BTW: I don't know the answer to the two questions I just posed. I'd be curious enough to know.

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send private message 
37fleetwood


Joined: 09 Aug 2007
Posts: 403

PostPosted: Thu 15 Jan 2009, 02:01    Post subject:  

I have to say I think the encrypted pupsave is really necessary especially if you are using a laptop. with this cool option, if you loose your computer somehow, it is gone but at least you don't have to worry about some weirdo writing crazy e-mails to your mom, or worse if you have an address book stored, calling friends or family, or really worse, showing up at someone's house! I've been meaning to set up a laptop with encryption for my Photography business and the more secure the better. my plan is encrypted pupsave, and truecrypt encrypted volume with all other documents etc. I've even been considering using bcrypt to encrypt the swap though the threat from someone finding or having stolen your laptop actually getting something useful from your swap is slim. running in root doesn't bother me at all.
Scott Cool

_________________
Thanks!
Scott Cool

I'm a PC... Without Windows
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 4 of 4 [48 Posts]   Goto page: Previous 1, 2, 3, 4
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » House Training » Beginners Help ( Start Here)
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0504s ][ Queries: 11 (0.0046s) ][ GZIP on ]