[Sussex] Newcomer
John D.
john at johnsemail.eclipse.co.uk
Tue Sep 20 11:01:37 UTC 2005
Steve Dobson wrote:
>Dave
>
>On Tue, Sep 20, 2005 at 10:39:02AM +0100, Dave Chapman wrote:
>
>
>>Login as martin then in the xterm type
>>su
>>
>>
>
>When `su'ing to root one should always use "su -". The flag causes the
>su(1) command to throw away the current users profile and replace it
>with the new users (the default being root). Of course to be really
>safe you should use "/bin/su -" to make sure your not using a user
>hacked version of su(1).
>
>This is a good security step. An environment can over anything on a
>*nix system, and the users could have trogan horse libraries that
>capture passwords and the like.
>
>
>
>> then the root password that you should have setup during install
>>Then type
>>yast2
>> If that does not work try
>>yast
>>
>>yast2 is the nicer graphical version of yast
>>
>>
>
>If you're going to be using a graphical program then before using "su -"
>one needs to first run the command "xhost +". This allows any user to
>put a graphical window upon the user's display. If you don't use "su -"
>but just "su" then the user's environment is still in place and his
>graphic authority is being used.
>
>Once you have "su -"ed then you also need to issue the command:
> export DISPLAY=:0.0
>in order for the graphics programs to know where to put their displays.
>
I wondered how that was done - because I have a rubbish memory for
commands and the like, except when I try the above I just get
john at localhost ~ $ xhost +
access control disabled, clients can connect from any host
john at localhost ~ $ su -
Password:
localhost ~ # xhost +
xhost: unable to open display ""
localhost ~ #
Correct me if I've understood what you posted wrongly Steve, if I do the
xhost + command, when I then do the su- (or is it suspace-???) it should
allow me to open a graphical root window (like I'd get if I was actually
logged in graphically as root) ???
regards
John D.
More information about the Sussex
mailing list