what is the difference between "tsu", "su" and "sudo"?
JJ
I needed to ask a question about the Linux commands used for getting
root access.
The question is, what is the difference between "tsu", "su", and
"sudo"?
I am mainly interested about the "tsu" command regarding which there
seems to be very little documentation.
What is the benefit in using e.g. "tsu" rather than "su"?
And are there other ones besides these 3? (If yes, any pointers to a
website discussing all of them would be appreciated.)
Thanks in advance,
Unruh
>Hi all
>I needed to ask a question about the Linux commands used for getting
>root access.
>The question is, what is the difference between "tsu", "su", and
>"sudo"?
Never heard of tsu. Not on my system.
>I am mainly interested about the "tsu" command regarding which there
>seems to be very little documentation.
So for something like securly logging in why in the world would you use
something for which you can find no docs? You look up the barrel of guns
to see if they are loaded while you pull the trigger as well?
>What is the benefit in using e.g. "tsu" rather than "su"?
For something like su, I would say there is no benefit.
>And are there other ones besides these 3? (If yes, any pointers to a
>website discussing all of them would be appreciated.)
???? What are you doing? There is a tool that is old, that has had a
huge amount of research done on it, that has had its security tested for
over a decade. And you want to use something that is unkown, is
undocumented and seems untested?
Note that sudo is very different from su. sudo is a program to allow a
user to run one single program ( or set of programs) and to give
individual users the permission to use only a small set of programs. su
is to log on as another user even while remaining logged on as the
original user. Some like Ubuntu feel that sudo is more secure, with no
evidence for that. It has its place.
>Thanks in advance,
Ian Northeast
What is tsu? I have never heard of it and cannot find any reference to it.
In what distribution have you found it?
Su is the traditional tool for an administrator who knows the root
password to gain temporary root access. Sudo is normally used to grant
other users who do not know the root password the authority to execute
certain defined commands with root authority. It can also be useful when
writing automated scripts which need limited root authority.
Ubuntu (and possibly other distros) use sudo as the primary means for an
administrator to gain root access, which enables root to have no password
set. I am not convinced that this aids security.
There is also sux, found in many distros, which is like su but also passes
on the X credentials, useful if you need to run anything graphical as root.
You can write your own setuid programs (su and sudo are such; sux is just
a script which calls su). You need to be very careful that you do not
introduce any security vulnerabilities if you do so. Setuid scripts are
not allowed.
Regards, Ian
anders
sudo vs. su
http://www.tuxmagazine.com/node/1000148
More about sudo in Ubuntu
https://help.ubuntu.com/community/RootSudo
'tsu', never heard of.
There are graphical equivalents to su/sudo, eg gksu/gksudo (Gnome) or
kdesu/kdesudo (KDE). But these are more if you want to use a graphical
dialogue to start a graphical program as root or with root-privileges.
/Anders
Martin Gregorie
> Su is the traditional tool for an administrator who knows the root
> password to gain temporary root access. Sudo is normally used to grant
> other users who do not know the root password the authority to execute
> certain defined commands with root authority. It can also be useful when
> writing automated scripts which need limited root authority.
>
> Ubuntu (and possibly other distros) use sudo as the primary means for an
> administrator to gain root access, which enables root to have no
> password set. I am not convinced that this aids security.
>
> There is also sux, found in many distros, which is like su but also
> passes on the X credentials, useful if you need to run anything
> graphical as root.
>
I found another just today - runuser. I'm not sure how useful this is but
am mentioning it for completeness. It changes the effective user id and
group id to that of 'USER'. There is no password prompt. If run as a non-
root user without privilege to set user ID, the command will fail. Like
bash and other shells you can use it to run a single command:
$ runuser -l USER -c "command args..."
so it can be useful for running commands under a different user: in
Fedora 10 the init.d script that starts the PostgreSQL database uses it
in preference to su and has a comment saying it must be used if SELinux
is installed and running. As I have SELinux disabled, I find its more or
less identical to:
$ su -l USER -c "command args..."
--
martin@ | Martin Gregorie
gregorie. | Essex, UK
org |
Wanna-Be Sys Admin
> ???? What are you doing? There is a tool that is old, that has had a
> huge amount of research done on it, that has had its security tested
> for over a decade. And you want to use something that is unkown, is
> undocumented and seems untested?
I've never heard of it either, and I often wonder why people tend to use
such things. I've seen a lot of people over the years just drop using
simple, secure, well tested, well documented tools/commands in lieu of
"new fun/hyped" tool (for no good reason, people often have to learn
now things (interfaces, languages, commands, output, bugs with it,
etc.). Really annoying to see (and have to deal with at work), but
people do it.
--
Not really a wanna-be, but I don't know everything.
Nix
> There is also sux, found in many distros, which is like su but also passes
> on the X credentials, useful if you need to run anything graphical as root.
This is presumably obsolete now that we have pam_xauth.
Nico Kadel-Garcia
sudo has also correctly handled this for years. In most instances, I
prefer sudo for its subtlety of available optioins, and prefer sudo
for its ability to allow designated users very specific administrative
privileges, using their own passwords, rather than giving them a local
root privilege. It helps me avoid having to write suid programs, as
well.
FP
> JJ <sa...@temporaryinbox.com> writes:
>
>
>>Hi all
>
>
>>I needed to ask a question about the Linux commands used for getting
>>root access.
>
>
>>The question is, what is the difference between "tsu", "su", and
>>"sudo"?
>
>
> Never heard of tsu. Not on my system.
Could it be a utility on Sun systems? Something to do with art, or war?
FP
Wanna-Be Sys Admin
> Could it be a utility on Sun systems? Something to do with art, or
> war?
>
> FP
Nice.
mi...@niftyegg.com
> On Fri, 25 Sep 2009 21:19:52 -0700, JJ wrote:
> >
> > I am mainly interested about the "tsu" command regarding which there seems
> > to be very little documentation.
It is simple and written in shell (sh). For details see https://github.com/cswl/tsu
Yes this is a very old thread but this thread showed up in a search and the web never forgets especially wrong and incomplete answers. ;-)
Carlos E.R.
> On Saturday, September 26, 2009 at 2:03:20 AM UTC-7, Ian Northeast wrote:
> .....
>>> The question is, what is the difference between "tsu", "su", and "sudo"?
>>>
>>> I am mainly interested about the "tsu" command regarding which there seems
>>> to be very little documentation.
>
> tsu is a wrapper for su that solves a set of termux issues.
> It is simple and written in shell (sh). For details see https://github.com/cswl/tsu
>
> Yes this is a very old thread but this thread showed up in a search and the web never forgets especially wrong and incomplete answers. ;-)
post, we can't.
--
Cheers, Carlos.
Bobbie Sellers
> On 2018-02-11 17:53, mi...@niftyegg.com wrote:
>> On Saturday, September 26, 2009 at 2:03:20 AM UTC-7, Ian Northeast wrote:
>> .....
>>>> The question is, what is the difference between "tsu", "su", and "sudo"?
>>>>
>>>> I am mainly interested about the "tsu" command regarding which there seems
>>>> to be very little documentation.
>>
>> tsu is a wrapper for su that solves a set of termux issues.
>> It is simple and written in shell (sh). For details see https://github.com/cswl/tsu
>>
>> Yes this is a very old thread but this thread showed up in a search and the web never forgets especially wrong and incomplete answers. ;-)
>
> This is not the web, this is nntp, Usenet. Only you can see the old
> post, we can't.
>
But it is an Android program maybe obsolete and not useful
to most Linux Users.
bliss
--
bliss dash SF 4 ever at dslextreme dot com