PDA

View Full Version : KDE permissions and user permissions!!!



newiaqua
12-23-2004, 01:06 PM
After hdd install an ordinary user(not super user) can not mount hard drive partition,
on the other side the same user running KDE could mount the partition.
This is true as well for the commands as: halt, restart and so on.

Is there a specific reason for this situation?

CrashedAgain
12-24-2004, 03:29 AM
What Knoppix version; what install type?

Permissions to access drives is set by /etc/fstab; permissions can be set to deny users write access or total access to drives. 'mount' command is always reseved for su only; on CD the script run by the cd icons mounts the drive as su since there is no su password it can do this without any action by the user. On a HD install with a root password set and users other than 'knoppix' this is not so. User knoppix on CD or on Knoppix type hd install has full sudo priviladges with no password required.

newiaqua
12-24-2004, 08:51 AM
Knoppix v.3.7 install with knx-hdinstall or something like.
I've checked a few sites and from sun's site I've understood that there were a file called /tmp/ICE-unix

here I'll post the suggested sollution of the discussed problem:

When you start KDE for the first time, if you start as root, it creates a /tmp/.ICE unix.
This gives KDE the wrong permissions.
To fix, login in a different desktop and do "chmod 1777 /tmp/.ICE-unix" then a normal user will work.
NOTE: if you login as root in KDE again it'll reset back.

eco2geek
12-24-2004, 09:44 AM
Huh? No clue what you mean.

Unix was designed to be a multi-user operating system. If I, say, ran a small Internet Services Provider business and my servers ran Unix, do you think I'd want any of my users to be able to mount or dismount disks, or halt or restart the system, at will? No, only I as administrator should be able to do that. In other words, it's not a bug, it's a feature.

As CrashedAgain said, Knoppix running from the CD (or installed to hard disk using a "Knoppix-style" install) is different from regular Linux, since you can become root without a password.

Can't see how changing the permissions of /tmp/.ICE-unix is going to make a regular user into a super-user. Nor can I see why you wouldn't just simply become root to do those things you mentioned.

newiaqua
12-26-2004, 07:49 PM
look at the previous post.
The problem is with the default installation of Knoppix -> then KDE takes over ROOT permissions and any user logged LOCALY on the computer could operate with KDE as ROOT(doing such jobs as halt, reboot, mount etc...)

changing permissions of /tmp/ice... would't turn user into super user.
It just will make KDE with superuser permissions.