Re: Make an existing user part of Administrators
On Tue Nov 13 17:25:14 UTC 2012 Matthew Miller wrote: I'm sorry, I don't understand what you're asking here. You can use the graphical users and groups tool to add people to the wheel group. I'll try to explain better. Tipically when I want to give my user admin privileges (on F16 and F17 for example), I simply do this: 1) add the user to the wheel group 2) uncomment one of these lines in pre-configured sudoers file #%wheelALL=(ALL)ALL # %wheelALL=(ALL)NOPASSWD: ALL depending if I want the user to always type their password or not This way of doing things comes from seeing that in sudoers already exists this pre-defined group wheel, so I don't go through creating another group for the same target. So far so good. During install phase for testing of F18 Beta TC7-8 I noticed this flag Add to Administrators group where you have to create a new user. (I remember it is there also at least in F17 but I didn't use it before...) So a natural question arose regarding what this flag does (only steps 1) and 2) above or other things such as selinux commands ecc?) to eventually learn other ways of reaching the same target, possibly also after the installation phase Call it curiosity for better understanding. Gianluca -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/14/2012 04:22 AM, Gianluca Cecchi wrote: On Tue Nov 13 17:25:14 UTC 2012 Matthew Miller wrote: I'm sorry, I don't understand what you're asking here. You can use the graphical users and groups tool to add people to the wheel group. I'll try to explain better. Tipically when I want to give my user admin privileges (on F16 and F17 for example), I simply do this: 1) add the user to the wheel group 2) uncomment one of these lines in pre-configured sudoers file #%wheelALL=(ALL)ALL # %wheelALL=(ALL)NOPASSWD: ALL depending if I want the user to always type their password or not This way of doing things comes from seeing that in sudoers already exists this pre-defined group wheel, so I don't go through creating another group for the same target. So far so good. During install phase for testing of F18 Beta TC7-8 I noticed this flag Add to Administrators group where you have to create a new user. (I remember it is there also at least in F17 but I didn't use it before...) So a natural question arose regarding what this flag does (only steps 1) and 2) above or other things such as selinux commands ecc?) to eventually learn other ways of reaching the same target, possibly also after the installation phase Call it curiosity for better understanding. Gianluca It does not do anything with SELinux. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlCjuQsACgkQrlYvE4MpobPrXwCgmitIX+N9iQ0l5BbrYmAv/Piy ot4AnR+ovA/RUsGyU7JPuzH4h/mk7t3I =viHl -END PGP SIGNATURE- -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
From the documentation, (http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html ) it seems that checking on administrator just puts the user in the wheel group. Odd -- I thought wheel had been deprecated years ago, and was kept in only for backwards compatibility. Who knew. billo On Tue, 13 Nov 2012, Gianluca Cecchi wrote: Hello, during install of F17 and F18 you are required to create a user. Also, you can flag if you want to make it part of administrator group. What is the command that runs under the scenes? What are the GUI steps to reproduce the same effects for an existing user after install? perhaps: - uncomment the %wheel line in sudoers - make the user part of wheel group ? thanks in advance gianluca -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote: Odd -- I thought wheel had been deprecated years ago, and was kept in only for backwards compatibility. Who knew. reference? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote: From the documentation, (http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html ) it seems that checking on administrator just puts the user in the wheel group. It just does that, *but*, many things in the distribution, including sudo, consolehelper, and policykit, are configured to understand that this means that the user is an admin. Odd -- I thought wheel had been deprecated years ago, and was kept in only for backwards compatibility. Who knew. Many people? :) -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ mat...@fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
Hi, I don't directly get ml e-mails in my inbox and I see that Bill Oliver post is empty at archive link: http://lists.fedoraproject.org/pipermail/users/2012-November/426712.html I only see some references to his reply (such as install doc link) in other users' replies... It would also be good to see the other things as written by Matthew Miller: ... many things in the distribution, including sudo, consolehelper, and policykit, are configured to understand that this means that the user is an admin. The sudo part is simple but the other ones? Any graphical way after install to make the same thing? Gianluca -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
On Tue, Nov 13, 2012 at 05:54:50PM +0100, Gianluca Cecchi wrote: I only see some references to his reply (such as install doc link) in other users' replies... It would also be good to see the other things as written by Matthew Miller: ... many things in the distribution, including sudo, consolehelper, and policykit, are configured to understand that this means that the user is an admin. The sudo part is simple but the other ones? Any graphical way after install to make the same thing? I'm sorry, I don't understand what you're asking here. You can use the graphical users and groups tool to add people to the wheel group. -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ mat...@fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Make an existing user part of Administrators
Heh. I just remember back when I was a grad student using UNIX, wheel *was* root, was in the /etc/passwd file, and there was no such thing as root. I swear I distinctly remember running an IRIX network back in the 90s when root was no longer wheel but suddenly became root, and wheel was all passe. In all these years, I never had occasion to notice that while wheel disappeared from /etc/passwd, it stayed in /etc/group. Now that I think about it, I guess I never set up a user account with root privileges. There was just root and users who could sudo. But then, a lot of things have changed. When I started grad school, I remember the Chair advising the first year students on how to learn good programming. He told us Find a PhD student you really admire and poke around in his home account to find stuff he is coding. Copy it to your home directory and study it. It's OK, anything anybody doesn't want looked at should be copied to the personal directory. And, sure enough, *all* of the student, staff, and faculty home directories were globally readable. You could change your permissions on your home acct, but it was considered antisocial. If I looked hard enough, I could probably find old code by a bunch of nowadays-senior NVIDIA folk in my backups from when we were in grad school together -- if I could find a 9-track tape reader somewhere. I guess the wheel group was of those old-timey things I assumed had changed, but never did. billo On Tue, 13 Nov 2012, Matthew Miller wrote: On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote: From the documentation, (http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html ) it seems that checking on administrator just puts the user in the wheel group. It just does that, *but*, many things in the distribution, including sudo, consolehelper, and policykit, are configured to understand that this means that the user is an admin. Odd -- I thought wheel had been deprecated years ago, and was kept in only for backwards compatibility. Who knew. Many people? :) -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ mat...@fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org