Re: [Cooker] need for root password (was: dm)

2003-08-14 Thread Dave Cotton
On Tue, 2003-08-05 at 04:41, Leon Brooks wrote:
 On Mon, 4 Aug 2003 19:29, Buchan Milne wrote:
  You see, instead of making it easy for a user to log in as
  root to do tasks, we must remove the necessity for them to do the
  tasks ...
 
 Agree. The one task which my wife needs a root password to do is printer 
 management. If it were possible to avert this OOtB, that would be good.

Absolutely, and then make sure that the utility does what it says it can
do. I've lost count how many times I've clicked KDE su's keep password
and then been asked for the password the next time. If it is not meant
to keep the password at a certain security level then the check-box
should not be there, be greyed out, whatever. Try Ignore to continue
with your current privileges and the same dialogue returns.

Explain that type of thing to a teacher, trying to work with a class of
30 odd screaming 11/12 year olds, with no time to discuss the niceties
of security, because Netscape has screwed up again on two or three
terminals. They'll be logged in as root next time, it's a question of
priorities and self preservation. 

I joined a company 20 years ago who had totally solved the diverse
permission problems on the Altos unix machines they supplied to
customers to run their software. They had a shell script that did chmod
777 on everything, solved the problem, perfectly.

-- 
Dave Cotton [EMAIL PROTECTED]




Re: [Cooker] need for root password (was: dm)

2003-08-14 Thread Pierre Jarillon
Le Mardi 5 Août 2003 08:07, Dave Cotton a écrit :

 I joined a company 20 years ago who had totally solved the diverse
 permission problems on the Altos unix machines they supplied to
 customers to run their software. They had a shell script that did chmod
 777 on everything, solved the problem, perfectly.

Exactly like people who drive their motor bike on a road at twice the maximum 
authorized speed. They don't live old.

-- 
Pierre Jarillon - http://pjarillon.free.fr/
Vice-président de l'ABUL : http://abul.org/




Re: [Cooker] need for root password (was: dm) [OT]

2003-08-14 Thread Jay DeKing
On Tuesday 05 August 2003 7:41 am, Leon Brooks honored me with this 
communique:
 On Tue, 5 Aug 2003 20:43, FACORAT Fabrice wrote:
  Le mar 05/08/2003 à 02:41, Leon Brooks a écrit :
  The one task which my wife needs a root password to do is
  printer management. If it were possible to avert this OOtB, that
  would be good.
 
  sudo
  but it's true that for example just to clean  align inkjet head
  printers u need raw access to the device, so root privileges. And
  sudo may not be always the solution.

 True, especially when the problem is tinkering with the printer settings
 in CUPS through the browser. Yes, I can add authentication to let her
 do that, but how is J Random MSCE to know that?

 Cheers; Leon

Well, in my experience, J. Random MSCE is overpaid and underinformed, even 
about Windows. I sure as shootin' wouldn't trust him/her to do *anything* 
involving Linux or Unix. 

For example, the resident expert where I work has his MSCE, but is widely 
known as the *last* person you want to call to solve any kind of Windows 
problems. He can't even install software in such a way that it is usable. We 
call him nimrod (when we are trying very hard to be polite). Then we ring 
up one of the non-MSCE admins to fix our broken boxen. I swear, he costs us 
more in down-time than he earns. Of course, I'm a contract PC board designer, 
so I earn even more than he does. Plus I've been using Windows since he was 
in short pants.

To be fair, it isn't the MSCE that makes these nimrods dangerous; it is the 
fact that their supervisors think that the MSCE makes them more knowledgeable 
than the guys who have many years of real-life experience. 

Jay
(Recovering Windows hacker)

-- 
Opportunity is missed by most people because it is dressed
in overalls and looks like work.
- Thomas Edison




Re: [Cooker] need for root password (was: dm)

2003-08-14 Thread FACORAT Fabrice
Le mar 05/08/2003 à 02:41, Leon Brooks a écrit :
 On Mon, 4 Aug 2003 19:29, Buchan Milne wrote:
  You see, instead of making it easy for a user to log in as
  root to do tasks, we must remove the necessity for them to do the
  tasks ...
 
 Agree. The one task which my wife needs a root password to do is printer 
 management. If it were possible to avert this OOtB, that would be good.


sudo
but it's true that for example just to clean  align inkjet head
printers u need raw access to the device, so root privileges. And sudo
may not be always the solution.

My experience :
a workstation with NFS /home. only one local user : root.
If I want the secretary to be able to clean her printer, I put kups and
mtink ( the printer is an Epson SC 1160 ) in sudo with root rights,
without password.
mtink is right, the pb is kups. If she launch the sudoed kups, it won't
work ( unable to create socket or find DCOP bla bla bla ). If I want
this work, I have first to launch kups as root, and after if she launch
the sudoed kups it will works ! so for me no interest because I will
have to launch kups as root ( with su ) at least one time before she
launch the sudoed kups if she has reboot the computer.

The pb seems to be that when launch with sudo, kups try to make DCOP
socket as root but in the home directory of the user, but as on NFS
share root = nobody , no way. When i launch kups after a su, it create
the DCOP in the root directory, when the user launch the sudoed kups, it
take this DCOP or at least is able to run.




Re: [Cooker] need for root password (was: dm)

2003-08-07 Thread Leon Brooks
On Tue, 5 Aug 2003 20:43, FACORAT Fabrice wrote:
 Le mar 05/08/2003 à 02:41, Leon Brooks a écrit :
 The one task which my wife needs a root password to do is
 printer management. If it were possible to avert this OOtB, that
 would be good.

 sudo
 but it's true that for example just to clean  align inkjet head
 printers u need raw access to the device, so root privileges. And
 sudo may not be always the solution.

True, especially when the problem is tinkering with the printer settings 
in CUPS through the browser. Yes, I can add authentication to let her 
do that, but how is J Random MSCE to know that?

Cheers; Leon




Re: [Cooker] need for root password (was: dm)

2003-08-04 Thread Leon Brooks
On Mon, 4 Aug 2003 19:29, Buchan Milne wrote:
 You see, instead of making it easy for a user to log in as
 root to do tasks, we must remove the necessity for them to do the
 tasks ...

Agree. The one task which my wife needs a root password to do is printer 
management. If it were possible to avert this OOtB, that would be good.

Cheers; Leon