Register
It is currently Mon May 21, 2018 10:54 am

Root for LMDE


All times are UTC


Post new topic Reply to topic  [ 9 posts ] 
Author Message
 PostPosted: Fri Dec 16, 2011 8:38 pm   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
I have installed LMDE to the Borders Box today. I am using it to post right away. In anticipation of someday possibly installing PC-BSD on the box with a thumb drive -- I have read on the net that it is not possible, and that it is possible -- lots of differing opinions out there.

It seems that Linux Mint Debian has taken the same Ubuntu route of 'sudoing' rather than having a root account. When I tried to update/upgrade on the borders box, even after using sudo, it asks if I am root. Is there a way of fixing this kind of setup so that I can have a separate root account from my user account? I wasn't asked to create a root account or password when installing, so I* assume that using sudo makes me the only 'root' that there is.

Code:
[email protected] ~ $ sudo apt-get update && apt-get upgrade
[sudo] password for jp:
Ign http://packages.linuxmint.com debian InRelease
Get:1 http://packages.linuxmint.com debian Release.gpg [198 B]                 
Hit http://debian.linuxmint.com testing InRelease                             
Get:2 http://packages.linuxmint.com debian Release [12.1 kB]                   
Hit http://debian.linuxmint.com testing/main i386 Packages/DiffIndex           
Ign http://www.debian-multimedia.org testing InRelease                         
Hit http://debian.linuxmint.com testing/contrib i386 Packages/DiffIndex       
Hit http://debian.linuxmint.com testing/non-free i386 Packages/DiffIndex       
Ign http://debian.linuxmint.com testing/contrib TranslationIndex               
Get:3 http://packages.linuxmint.com debian/main i386 Packages [9,896 B]       
Hit http://debian.linuxmint.com testing/main TranslationIndex                 
Ign http://debian.linuxmint.com testing/non-free TranslationIndex             
Hit http://www.debian-multimedia.org testing Release.gpg                       
Hit http://www.debian-multimedia.org testing Release                           
Get:4 http://packages.linuxmint.com debian/upstream i386 Packages [5,208 B]   
Get:5 http://packages.linuxmint.com debian/import i386 Packages [19.4 kB]     
Ign http://packages.linuxmint.com debian/import TranslationIndex               
Ign http://packages.linuxmint.com debian/main TranslationIndex                 
Hit http://www.debian-multimedia.org testing/main i386 Packages/DiffIndex     
Ign http://packages.linuxmint.com debian/upstream TranslationIndex             
Hit http://www.debian-multimedia.org testing/non-free i386 Packages/DiffIndex 
Ign http://www.debian-multimedia.org testing/main TranslationIndex             
Ign http://www.debian-multimedia.org testing/non-free TranslationIndex         
Hit http://security.debian.org testing/updates InRelease                       
Hit http://security.debian.org testing/updates/main i386 Packages             
Hit http://security.debian.org testing/updates/contrib i386 Packages
Hit http://security.debian.org testing/updates/non-free i386 Packages         
Ign http://security.debian.org testing/updates/contrib TranslationIndex       
Ign http://security.debian.org testing/updates/main TranslationIndex           
Ign http://security.debian.org testing/updates/non-free TranslationIndex       
Ign http://debian.linuxmint.com testing/contrib Translation-en_US             
Ign http://debian.linuxmint.com testing/contrib Translation-en                 
Ign http://debian.linuxmint.com testing/non-free Translation-en_US             
Ign http://debian.linuxmint.com testing/non-free Translation-en               
Ign http://packages.linuxmint.com debian/import Translation-en_US             
Ign http://security.debian.org testing/updates/contrib Translation-en_US       
Ign http://security.debian.org testing/updates/contrib Translation-en         
Ign http://security.debian.org testing/updates/main Translation-en_US         
Ign http://security.debian.org testing/updates/main Translation-en             
Ign http://security.debian.org testing/updates/non-free Translation-en_US     
Ign http://packages.linuxmint.com debian/import Translation-en       
Ign http://security.debian.org testing/updates/non-free Translation-en
Ign http://packages.linuxmint.com debian/main Translation-en_US     
Ign http://packages.linuxmint.com debian/main Translation-en
Ign http://packages.linuxmint.com debian/upstream Translation-en_US
Ign http://packages.linuxmint.com debian/upstream Translation-en
Ign http://www.debian-multimedia.org testing/main Translation-en_US
Ign http://www.debian-multimedia.org testing/main Translation-en
Ign http://www.debian-multimedia.org testing/non-free Translation-en_US
Ign http://www.debian-multimedia.org testing/non-free Translation-en
Fetched 46.9 kB in 4s (11.1 kB/s)
Reading package lists... Done
E: Could not open lock file /var/lib/dpkg/lock - open (13: Permission denied)
E: Unable to lock the administration directory (/var/lib/dpkg/), are you root?


Is there a way of fixing this kind of problem so that I can have a separate root account from my user account? I wasn't asked to create a root account or password when installing, so I assume that using sudo makes me the only 'root' that there is.

Thanks; JP

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Last edited by JP on Fri Dec 16, 2011 9:07 pm, edited 1 time in total.

Top
 Profile  
 PostPosted: Fri Dec 16, 2011 9:01 pm   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
I found this on the net at Pathetic Cockroach's site, and tried it out -
Quote:
How to create the root account in ubuntu or rather configure its password


Clik ;)

- I had to create a new group, 'sudoers' but I am now updating/upgrading from what the terminal looks like - and I can use 'su' instead of sudo, which didn't allow it to update/upgrade!

I'm sure there are other/better ways to create a 'root' account and get rid of the sudoers workaround, but this is what I've done for now until I find a better way!

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Last edited by JP on Fri Dec 16, 2011 9:14 pm, edited 1 time in total.

Top
 Profile  
 PostPosted: Fri Dec 16, 2011 9:10 pm   
Linux Guru
User avatar

Joined: Sat May 01, 2004 2:37 pm
Posts: 4013
Location: AZ, USA
Just as an fyi, you could have used "sudo su -" (ok, sudo su also, but keeps your shell instead of completely swithching to the root shell)to gain access to root without actually enabling the root account. This is the way Ubuntu WANTS you to do it (and for me I do actually do it that way on almost all my systems due to ease).

_________________
Specs of all my systems


Top
 Profile  
 PostPosted: Fri Dec 16, 2011 9:25 pm   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
Well, I tried 'su', and it told me there was no 'root' account, so that's why I began looking for a way to create one ... I still hope to find a way to actually create a 'root' account .... I don't feel that the 'sudo' thing is very secure, since it seems that without having a ''root/admin" account, any user on the same box could add himself to the 'sudoers' group and change/destroy the whole system setup! I'm no expert on Ubuntu (Haven't read their dox) or LM (their handbook/guide is useless), so there may be ways of securing that I don't have any knowlege of, I'm just speaking from an ordinary user's perspective.

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Top
 Profile  
 PostPosted: Sat Dec 17, 2011 2:09 am   
Linux Guru
User avatar

Joined: Sat May 01, 2004 2:37 pm
Posts: 4013
Location: AZ, USA
well, there IS a root account, it's simply that there is no root LOGIN. sudo su - becomes full root. And what you did enabled the full root account, I seem to recall that it should allow a login now. However it still won't from X by default, almost all the (x)dm's are configured by default to not allow root login.

If I remember my Ubuntu correctly, by default, only the FIRST user created is created with full sudo abilities. Any further users are not. So therefore if you want any other users other than yourself to be able to sudo to root, you have to explicitly give them rights. This was specifically implemented for security reasons, so that normal users couldn't get the root password and damage the system.

Only someone with full sudo rights can edit the /etc/group file that manages these rights (or of course if someone boots if you're not using encryption to a USB/CD rom and mounts the partition as writable and changes it). The primary weakness is if you forget the password of aforementioned account that has sudo rights, you can't admin the box until such a point as you boot to USB/cd-rom and either reset their password or add another user to the sudoers group.

_________________
Specs of all my systems


Top
 Profile  
 PostPosted: Sat Dec 17, 2011 2:45 am   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
tlmiller wrote:
If I remember my Ubuntu correctly, by default, only the FIRST user created is created with full sudo abilities. Any further users are not. So therefore if you want any other users other than yourself to be able to sudo to root, you have to explicitly give them rights. This was specifically implemented for security reasons, so that normal users couldn't get the root password and damage the system.




That I didn't know .... that makes me feel better, becuz my family will also be using this box until I load it with PC-BSD, so I didn't want to have to re-install a bunch of times ;)



I don't know what's wrong with this quote thingy, but it's trying my patience ..... if it don't work this time, I'm leaving it :!:

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Last edited by JP on Sat Dec 17, 2011 2:49 am, edited 2 times in total.

Top
 Profile  
 PostPosted: Sat Dec 17, 2011 2:46 am   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
tlmiller wrote:
Only someone with full sudo rights can edit the /etc/group file that manages these rights (or of course if someone boots if you're not using encryption to a USB/CD rom and mounts the partition as writable and changes it). The primary weakness is if you forget the password of aforementioned account that has sudo rights, you can't admin the box until such a point as you boot to USB/cd-rom and either reset their password or add another user to the sudoers group.


I'll have to look into encryption if I ever move to a big city ..... with only 100 people in town, I think I'm the only one who uses Linux :lol:

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Top
 Profile  
 PostPosted: Sat Dec 17, 2011 4:13 am   
Linux Guru
User avatar

Joined: Sat May 01, 2004 2:37 pm
Posts: 4013
Location: AZ, USA
I actually just had to reinstall Kubuntu 11.10 due to a drive failure, and I verified. The "admin" group gives access to full sudo access by default, and only the first user is added to this group by default. Future users are added to nothing if created through command line, or to everything but "admin" that the first user if created through the gui application that Ubuntu has.

_________________
Specs of all my systems


Top
 Profile  
 PostPosted: Sat Dec 17, 2011 7:29 pm   
Linux Guru
User avatar

Joined: Wed Jul 07, 2004 3:30 am
Posts: 7400
Location: Central Montana & Eastern Tennessee
THX :!:

_________________
BYOBox - Dell E6400 7w/MX 17
BrewBox - D610 7w/antix17 base
PlayBox - antiX 17 Testing


Top
 Profile  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2012 phpBB Group
© 2003 - 2012 USA LINUX USERS GROUP