Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-11 Thread David Wright
On Wed 11 May 2022 at 20:26:20 (+0200), to...@tuxteam.de wrote: > On Wed, May 11, 2022 at 11:07:09AM -0500, David Wright wrote: > > [...] > > > But after two posts about background information on setuid shell > > scripts, you now write "the worst antipattern is to misuse tech > > to force people

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-11 Thread tomas
On Wed, May 11, 2022 at 11:07:09AM -0500, David Wright wrote: [...] > But after two posts about background information on setuid shell > scripts, you now write "the worst antipattern is to misuse tech > to force people to follow some nonsensical rituals". Strong words. Sorry if I was unclear. Th

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-11 Thread David Wright
On Wed 11 May 2022 at 07:05:47 (+0200), to...@tuxteam.de wrote: > On Tue, May 10, 2022 at 10:08:20PM -0500, David Wright wrote: > > On Tue 10 May 2022 at 17:12:25 (-0600), Charles Curley wrote: > > [...] > > > IOW, though logging in to root by password is ok at the console, > > it's not ok when r

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-11 Thread Dan Ritter
Charles Curley wrote: > On Tue, 10 May 2022 11:08:23 -0500 > David Wright wrote: > > > That complicates unlocking partitions remotely because, even if you > > can log in as root, you normally can't log in remotely as root. > > ??? I log in as root over SSH all the time. Most sshd configs eithe

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread tomas
On Tue, May 10, 2022 at 10:08:20PM -0500, David Wright wrote: > On Tue 10 May 2022 at 17:12:25 (-0600), Charles Curley wrote: [...] > IOW, though logging in to root by password is ok at the console, > it's not ok when remote. ➀ I assume you know all that you can set "PermitRootLogin yes" in your

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread David Wright
On Tue 10 May 2022 at 17:12:25 (-0600), Charles Curley wrote: > On Tue, 10 May 2022 11:08:23 -0500 > David Wright wrote: > > > That complicates unlocking partitions remotely because, even if you > > can log in as root, you normally can't log in remotely as root. > > ??? I log in as root over SSH

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread Greg Wooledge
On Tue, May 10, 2022 at 05:12:25PM -0600, Charles Curley wrote: > David Wright wrote: > > I use a special user called unlock, whose home directory is on > > /var/local/, to unlock my /home partitions: > > Unlock? What does "unlock" mean in this context? It looks like a > synonym for "mount". If s

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread Charles Curley
On Tue, 10 May 2022 11:08:23 -0500 David Wright wrote: > That complicates unlocking partitions remotely because, even if you > can log in as root, you normally can't log in remotely as root. ??? I log in as root over SSH all the time. > > I use a special user called unlock, whose home director

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread David Wright
On Tue 10 May 2022 at 13:02:41 (-0400), Greg Wooledge wrote: > On Tue, May 10, 2022 at 11:08:23AM -0500, David Wright wrote: [> > On Tue 10 May 2022 at 08:21:00 (-0600), Charles Curley wrote:] > > > Why the aversion to doing things as root? Why not just run your scripts > > > as root? This is exa

Re: Unlocking (remote/local), was Re: Help with suid (bash)

2022-05-10 Thread Greg Wooledge
On Tue, May 10, 2022 at 11:08:23AM -0500, David Wright wrote: > > On Tue, 10 May 2022 07:50:18 -0400 rhkra...@gmail.com wrote: > > Why the aversion to doing things as root? Why not just run your scripts > > as root? This is exactly the sort of thing that is reserved to root for > > reasons of secur