Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can't run apps as root in KDE

150 views
Skip to first unread message

T Elcor

unread,
Jul 1, 2011, 3:10:01 PM7/1/11
to
Hi,

Am having problems running KDE apps as root. To reproduce:
1. Open the KDE Menu Editor
2. Setup a new app item (for example, copy and paste Konqueror to Konqueror-2)
3. Goto the "Advanced" tab and check the "Run as a different user" checkbox
4. Type "root" in the username box
5. Save changes
6. Run Konqueror-2 from the KDE Kickoff Application Laucher.

Konqueror-2 shows up briefly in the applicaton panel at the bottom but it doesn't run.

Any ideas? Thanks


# uname -a
Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32 UTC 2011 x86_64 GNU/Linux


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1309547245.52099...@web121911.mail.ne1.yahoo.com

Lisi

unread,
Jul 1, 2011, 4:50:02 PM7/1/11
to
On Friday 01 July 2011 20:07:25 T Elcor wrote:
> Hi,
>
> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste Konqueror to
> Konqueror-2) 3. Goto the "Advanced" tab and check the "Run as a different
> user" checkbox 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the bottom but it
> doesn't run.
>
> Any ideas? Thanks
>
>
>
>
> # uname -a
> Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32 UTC 2011 x86_64
> GNU/Linux

Have you tried;
alt+F2 to get krunner (I think that it is called), then enter:
kdesu <application-that-you-want-to-run-as-root> <enter>
enter root password when asked.

Does this cause the same problem?

Lisi


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/201107012144.3...@gmail.com

eqisow

unread,
Jul 1, 2011, 4:50:02 PM7/1/11
to

On Jul 1, 2011 3:07 PM, "T Elcor" <tel...@yahoo.com> wrote:
>
> Hi,
>
> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste Konqueror to Konqueror-2)
> 3. Goto the "Advanced" tab and check the "Run as a different user" checkbox
> 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the bottom but it doesn't run.
>
> Any ideas? Thanks
>
>

What happens if you leave the user blank? Not sure if that's the cause, but you shouldn't have to specify 'root'.

T Elcor

unread,
Jul 1, 2011, 5:20:02 PM7/1/11
to
--- On Fri, 7/1/11, eqisow <eqi...@gmail.com> wrote:

> > Am having problems running KDE apps as root. To
> reproduce:
>
> > 1. Open the KDE Menu Editor
>
> > 2. Setup a new app item (for example, copy and paste
> Konqueror to Konqueror-2)
>
> > 3. Goto the "Advanced" tab and check the
> "Run as a different user" checkbox
>
> > 4. Type "root" in the username box
>
> > 5. Save changes
>
> > 6. Run Konqueror-2 from the KDE Kickoff Application
> Laucher.
>
> >
>
> > Konqueror-2 shows up briefly in the applicaton panel
> at the bottom but it doesn't run.
>
> >
>
> > Any ideas? Thanks
>
> >
>
> >


> What happens if you leave the user blank? Not sure if
> that's the cause, but you shouldn't have to specify
> 'root'.

Removing "root" doesn't seem to change anything.


> Have you tried;
> alt+F2 to get krunner (I think that it is called), > then enter:
> kdesu <application-that-you-want-to-run-as-root> <enter>


When I do Alt+F2, then type "kdesu konqueror" (without quotes) and then try to press <Enter> nothing happens, pressing <Enter> doesn't seem to have any effect. Have you tried it yourself?

Thanks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309555077.6202....@web121907.mail.ne1.yahoo.com

Lisi

unread,
Jul 1, 2011, 5:40:02 PM7/1/11
to
On Friday 01 July 2011 22:17:57 T Elcor wrote:
> > Have you tried;
> > alt+F2 to get krunner (I think that it is called), > then enter:
> > kdesu <application-that-you-want-to-run-as-root> <enter>
>
> When I do Alt+F2, then type "kdesu konqueror" (without quotes) and then try
> to press <Enter> nothing happens, pressing <Enter> doesn't seem to have any
> effect. Have you tried it yourself?

Yes - I use it all the time. Less convoluted IMHO! It is also possible to
click on "run" instead of pressing <enter> - I'm just naturally lazy! - but I
would not expect that to be different. So the answer to my question is yes,
that method does have the same problem, you still can't run Konqueror etc. as
root.

Lisi


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/201107012232.1...@gmail.com

William Hopkins

unread,
Jul 1, 2011, 5:50:02 PM7/1/11
to
On 07/01/11 at 02:17pm, T Elcor wrote:
> When I do Alt+F2, then type "kdesu konqueror" (without quotes) and then try
> to press <Enter> nothing happens, pressing <Enter> doesn't seem to have any
> effect. Have you tried it yourself?

Try the same command from a terminal window, and see what errors you get.

--
Liam

signature.asc

Hans-J. Ullrich

unread,
Jul 1, 2011, 6:00:02 PM7/1/11
to
You can also try in konsole "sux", then start konqueror. I believe sux must be
installed as a package (it is an optimised "su -" wrapper).

If it works with sux, try kdesu konqueror or gksu konqueror as normal user.

Good luck!

Hans


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/201107012352.50...@loop.de

T Elcor

unread,
Jul 1, 2011, 6:30:02 PM7/1/11
to
--- On Fri, 7/1/11, William Hopkins <we.ho...@gmail.com> wrote:

> Try the same command from a terminal window, and see what
> errors you get.

luser@testbox:~$ kdesu konqueror
bash: kdesu: command not found
luser@testbox:~$ whereis kdesu
kdesu: /usr/share/man/man1/kdesu.1.gz
luser@testbox:~$ which kdesu
luser@testbox:~$


# dpkg -S kdesu
kdebase-runtime: /usr/lib/kde4/libexec/kdesu
kdebase-runtime: /usr/lib/kde4/libexec/kdesud
libkdesu5: /usr/share/doc/libkdesu5/TODO.gz
libkdesu5: /usr/share/doc/libkdesu5/changelog.Debian.gz
libkdesu5: /usr/lib/kde4/libexec/kdesu_stub
libkdesu5: /usr/share/doc/libkdesu5/NEWS.Debian.gz
libkdesu5: /usr/lib/libkdesu.so.5
libkdesu5: /usr/share/doc/libkdesu5/copyright
kdebase-runtime-data: /usr/share/doc/kde/HTML/en/kdesu/common
libkdesu5: /usr/share/doc/libkdesu5/README.gz
kdebase-runtime-data: /usr/share/doc/kde/HTML/en/kdesu
kdebase-runtime-data: /usr/share/doc/kde/HTML/en/kdesu/index.docbook
kdebase-runtime-data: /usr/share/doc/kde/HTML/en/kdesu/man-kdesu.1.docbook
kdebase-runtime-data: /usr/share/man/man1/kdesu.1.gz
libkdesu5: /usr/share/doc/libkdesu5
libkdesu5: /usr/lib/libkdesu.so.5.4.0
kdebase-runtime-data: /usr/share/doc/kde/HTML/en/kdesu/index.cache.bz2
libkdesu5: /usr/share/doc/libkdesu5/AUTHORS


# ls -l /usr/lib/kde4/libexec/kdesu
-rwxr-xr-x 1 root root 54720 Jul 20 2010 /usr/lib/kde4/libexec/kdes

Thanks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309558857.98784...@web121913.mail.ne1.yahoo.com

Osamu Aoki

unread,
Jul 1, 2011, 11:10:01 PM7/1/11
to
Hi,

On Fri, Jul 01, 2011 at 12:07:25PM -0700, T Elcor wrote:
> Hi,
>
> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste Konqueror to Konqueror-2)
> 3. Goto the "Advanced" tab and check the "Run as a different user" checkbox
> 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the bottom but it doesn't run.
>
> Any ideas? Thanks

I do not know about exact reason why but...

Generally, it is bad idea to run desktop application as root. So
application system may put some checks and prevent you to run as root.
This is due to security concern.

Why do this? I see no reason to overcome this security measure.

Osamu

FYI:
If you are doing this for debug purpose, you can change user on console
using su or sudo under proper configuration done from root. When
switching to root, you need to preserve environment to get connected to
X, as you might have known.


>
>
>
> # uname -a
> Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32 UTC 2011 x86_64 GNU/Linux
>
>
> --
> To UNSUBSCRIBE, email to debian-us...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
> Archive: http://lists.debian.org/1309547245.52099...@web121911.mail.ne1.yahoo.com


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/20110702024...@debian.org

Scott Ferguson

unread,
Jul 1, 2011, 11:20:01 PM7/1/11
to
On 02/07/11 05:07, T Elcor wrote:
> Hi,
>
> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste Konqueror to Konqueror-2)
> 3. Goto the "Advanced" tab and check the "Run as a different user" checkbox
> 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the bottom but it doesn't run.
>
> Any ideas? Thanks
>
>
>
>
> # uname -a
> Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32 UTC 2011 x86_64 GNU/Linux
>
>

Did you enable sudo during the install?
*By default Squeeze KDE has a "hidden" konqueror as root menu entry....*
did you try that? :-)


Right-click over the KMenu thingie, select "Menu Editor"
Settings => Configure KDE Menu Editor => Misc => Tick "Show hidden
Entries" => OK.
In the left-hand pane expand "System" and then expand "More
Applications" - see the "File Manager Superuser mode" ??
Untick "Hidden entry"
Click on "Save" and close the Menu Editor

KMenu => System => More Applications => File Manager - Superuser Mode

If that fails to produce a password prompt please post the output of:-
$ ls -alL /usr/lib/kde4/libexec/kdesu

Assumption: you're running Squeeze (from uname -r)??

Cheers


--
“How come people always flip and think they're Jesus?
Why not Buddha?
Particularly in America, where more people resemble Buddha than Jesus.
'Ah'm BUDDHA!'
'You're Bubba!'
'Ah'm Buddha now..All I gotta do is change 3 letters on ma belt...' ”
~ Bill Hicks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/4E0E8DAB...@gmail.com

T Elcor

unread,
Jul 2, 2011, 12:30:01 AM7/2/11
to
--- On Fri, 7/1/11, Scott Ferguson <prettyfly....@gmail.com> wrote:

> Did you enable sudo during the install?

I had this functionality working a while ago (I use it only occasionally), but then it stopped working. Maybe it was a security update that killed it or perhaps something else. Something has changed. I remember there was a way to access "Run as a different user" functionality from the Alt+F2 feature (when you click on the "wrench") but now it seems to have gone.


> *By default Squeeze KDE has a "hidden" konqueror as root
> menu entry....*
> did you try that? :-)

I enabled hidden items, saved the menu editor settings and even restarted KDE. Still the Kickoff Launcher doesn't show "File Manager - Super User Mode" item for me to run, so I can't run it. But the Launcher does show Konqueror-2 entry that I had a while back and then deleted. Where it still gets Konqueror-2 from I'm not sure.


> If that fails to produce a password prompt please post the
> output of:-
> $ ls -alL /usr/lib/kde4/libexec/kdesu

# ls -alL /usr/lib/kde4/libexec/kdesu
-rwxr-xr-x 1 root root 54720 Jul 20 2010 /usr/lib/kde4/libexec/kdesu

> Assumption: you're running Squeeze (from uname -r)??

# uname -a


Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12
03:40:32 UTC 2011 x86_64 GNU/Linux


Thanks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309580440.88793...@web121911.mail.ne1.yahoo.com

Scott Ferguson

unread,
Jul 2, 2011, 1:00:02 AM7/2/11
to
On 02/07/11 14:20, T Elcor wrote:
> --- On Fri, 7/1/11, Scott Ferguson <prettyfly....@gmail.com>
> wrote:
>
>> Did you enable sudo during the install?
>
> I had this functionality working a while ago (I use it only
> occasionally), but then it stopped working. Maybe it was a security
> update that killed it or perhaps something else. Something has
> changed.

Indeed... :-/

> I remember there was a way to access "Run as a different
> user" functionality from the Alt+F2 feature (when you click on the
> "wrench") but now it seems to have gone.

??

>
>
>> *By default Squeeze KDE has a "hidden" konqueror as root menu
>> entry....* did you try that? :-)
>
> I enabled hidden items, saved the menu editor settings and even
> restarted KDE.

What you have described is not sufficient to enable a hidden menu entry.
See my next comment.

> Still the Kickoff Launcher doesn't show "File Manager
> - Super User Mode" item for me to run, so I can't run it.

It is unclear to me that you followed all the steps I outlined, please
confirm that you did the following. *Pay particular attention to step 2.*
Excerpt from my previous instructions, refer to them for context:-
1. In the left-hand pane expand "System" and then expand "More
Applications" - *for the "File Manager - Superuser mode" entry*:-
2. Untick "Hidden entry"
3. Then Click on "Save" and close the Menu Editor


> But the
> Launcher does show Konqueror-2 entry that I had a while back and then
> deleted. Where it still gets Konqueror-2 from I'm not sure.

>From the new (copied) menu entry you created?

That you can't see "File Manager Superuser mode" tends to suggest it's
still configured to be hidden....

>
>
>> If that fails to produce a password prompt please post the output
>> of:- $ ls -alL /usr/lib/kde4/libexec/kdesu
>
> # ls -alL /usr/lib/kde4/libexec/kdesu -rwxr-xr-x 1 root root 54720
> Jul 20 2010 /usr/lib/kde4/libexec/kdesu


So it's there.

NOTE: for future reference - a command line suggestion prefaced by $
means run as user, # means run as root.
Eg. I asked for the output of:-
$ ls -alL /usr/lib/kde4/libexec/kdesu

You ran that command as root - *doesn't matter in this case*, but it's a
good idea to only run commands as root *when no other way is possible* ;-)

eg.:-
scott@work:~$ ls -alL /usr/lib/kde4/libexec/kdesu
-rwxr-xr-x 1 root root 47548 Jul 21 2010 /usr/lib/kde4/libexec/kdesu

Gives the same information without the risks.


>
>
>
>> Assumption: you're running Squeeze (from uname -r)??
>
> # uname -a Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32
> UTC 2011 x86_64 GNU/Linux

Is that yes??

>
>
> Thanks
>
>

Please post the entire, unmodified /etc/apt/sources.list

Also the output, if any, of:-
$ dpkg --get-selections sudo

Cheers

--
“How come people always flip and think they're Jesus?
Why not Buddha?
Particularly in America, where more people resemble Buddha than Jesus.
'Ah'm BUDDHA!'
'You're Bubba!'
'Ah'm Buddha now..All I gotta do is change 3 letters on ma belt...' ”
~ Bill Hicks

--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/4E0EA4ED...@gmail.com

Camaleón

unread,
Jul 2, 2011, 4:50:02 AM7/2/11
to
On Sat, 02 Jul 2011 11:42:13 +0900, Osamu Aoki wrote:

> On Fri, Jul 01, 2011 at 12:07:25PM -0700, T Elcor wrote:

>> Am having problems running KDE apps as root.

(...)

> I do not know about exact reason why but...
>
> Generally, it is bad idea to run desktop application as root. So
> application system may put some checks and prevent you to run as root.
> This is due to security concern.

There can be zillion of reasons to run an application as root so I hope
this options is still available.

It is also possible to run a full DE session under root, but that's
another story.

> Why do this? I see no reason to overcome this security measure.

What security measure? Can you please expand that? Is there something at
kde that changed and users need to know? Since years I've been instructed
in running "kdesu" or "gksu" as the recommended way for doing it so,
what's wrong with this? Is there a new tool that supersedes it?

> FYI:
> If you are doing this for debug purpose, you can change user on console
> using su or sudo under proper configuration done from root. When
> switching to root, you need to preserve environment to get connected to
> X, as you might have known.

Running a X app after "su -" has been failing for some time, I'm afraid
this is not an option anymore.

stt008:~# firefox
Error: no display specified

stt008:~# LANG=POSIX; gedit
cannot open display:
Run 'gedit --help' to see a full list of available command line options.

Greetings,

--
Camaleón


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/pan.2011.07...@gmail.com

Osamu Aoki

unread,
Jul 2, 2011, 6:20:01 AM7/2/11
to
Hi,

I have to admit that for some desktop system with passwordless sudo
policy, you may not gain much security advantage by not using root,
since your user account is practically root in terms of security...

On Sat, Jul 02, 2011 at 08:40:31AM +0000, Camaleón wrote:
> On Sat, 02 Jul 2011 11:42:13 +0900, Osamu Aoki wrote:
>
> > On Fri, Jul 01, 2011 at 12:07:25PM -0700, T Elcor wrote:
>
> >> Am having problems running KDE apps as root.
>
> (...)
>
> > I do not know about exact reason why but...
> >
> > Generally, it is bad idea to run desktop application as root. So
> > application system may put some checks and prevent you to run as root.
> > This is due to security concern.
>
> There can be zillion of reasons to run an application as root so I hope
> this options is still available.

There are reason to run some system configuration applications as root
but this does not require you to login as root to X via kdm/gdm/....

I do not think firefox is type of program requring root...

> It is also possible to run a full DE session under root, but that's
> another story.
>
> > Why do this? I see no reason to overcome this security measure.
>
> What security measure? Can you please expand that?

If you get compromised for an user account, the attacker can not do bad
things beyond that account if it does not gain root. If the attacker
gets to do thing as root, that is the worst thing you want to have.

You never know remote site accessed by firefox may contain page contents
which tries to exploit security hole of firefox before they are fixed.

> Is there something at
> kde that changed and users need to know? Since years I've been instructed
> in running "kdesu" or "gksu" as the recommended way for doing it so,

At least, Debian Reference says
http://www.debian.org/doc/manuals/debian-reference/ch07.en.html
(Yes, that's me.)

> what's wrong with this? Is there a new tool that supersedes it?

For system administration GUI packages, these are GUI frontend to invoke
them. Nothing supersede them but there are other tools if you know how.

Googling "running desktop as root security" seems to indicate people
tends to do this for desktop.
http://www.micro-hard.dreamhosters.com/root_GUI_login/
This guy seems to be knowledgeable enough and doing this just for fun
while knowing its risks. Maybe his old page may give you idea.

For me, I have no reason to use root_GUI_login since I can do everything
I need without it. Every tiny bits count when it comes to security.

> > FYI:
> > If you are doing this for debug purpose, you can change user on console
> > using su or sudo under proper configuration done from root. When
> > switching to root, you need to preserve environment to get connected to
> > X, as you might have known.
>
> Running a X app after "su -" has been failing for some time, I'm afraid
> this is not an option anymore.
>
> stt008:~# firefox
> Error: no display specified

try "su -p ;firefox". I wrote the above after double checking this works
now for firefox still :-) This is because values of the old user's
"$XAUTHORITY" and "$DISPLAY" environment variables must be copied to the
new user's ones.

Do not try to peek into unsafe URLs.

Anyway, please think twice before playing with fire.

Osamu


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/2011070209...@debian.org

Camaleón

unread,
Jul 2, 2011, 7:00:02 AM7/2/11
to
On Sat, 02 Jul 2011 18:57:11 +0900, Osamu Aoki wrote:

> I have to admit that for some desktop system with passwordless sudo
> policy, you may not gain much security advantage by not using root,
> since your user account is practically root in terms of security...

¿?

> On Sat, Jul 02, 2011 at 08:40:31AM +0000, Camaleón wrote:

>> > Generally, it is bad idea to run desktop application as root. So
>> > application system may put some checks and prevent you to run as
>> > root. This is due to security concern.
>>
>> There can be zillion of reasons to run an application as root so I hope
>> this options is still available.
>
> There are reason to run some system configuration applications as root
> but this does not require you to login as root to X via kdm/gdm/....

No one said nothing about "login" as root but "running" an app as root.

> I do not think firefox is type of program requring root...

I only have 2 users in my debian box: me and root.

When I need to test if there is a configuration issue with the browser
(or my Gnome profile), I launch it as root because it has an almost empty
firefox profile.

And it is also understandable that new users prefer to edit some files
with Kwrite or Gedit instead by using another command line tools, though
not a perfect way to make things. New users will learn this in their way
to linux...

>> > Why do this? I see no reason to overcome this security measure.
>>
>> What security measure? Can you please expand that?
>
> If you get compromised for an user account, the attacker can not do bad
> things beyond that account if it does not gain root. If the attacker
> gets to do thing as root, that is the worst thing you want to have.
>
> You never know remote site accessed by firefox may contain page contents
> which tries to exploit security hole of firefox before they are fixed.

I understand that, but I'm afraid we are not taking here about login into
DE as root users but launching one application as root.



>> Is there something at
>> kde that changed and users need to know? Since years I've been
>> instructed in running "kdesu" or "gksu" as the recommended way for
>> doing it so,
>
> At least, Debian Reference says
> http://www.debian.org/doc/manuals/debian-reference/ch07.en.html (Yes,
> that's me.)

Should I need to focus in any specific section? Or to put it simple, is
kdesu/gksu not recommended anymore? In such case, what is now the
recommended way for launching a X application as root? Or is that there
is no way?

>> what's wrong with this? Is there a new tool that supersedes it?
>
> For system administration GUI packages, these are GUI frontend to invoke
> them. Nothing supersede them but there are other tools if you know how.

Ah, that sounds better :-)



> Googling "running desktop as root security" seems to indicate people
> tends to do this for desktop.
> http://www.micro-hard.dreamhosters.com/root_GUI_login/
> This guy seems to be knowledgeable enough and doing this just for fun
> while knowing its risks. Maybe his old page may give you idea.

I will never recommend running a full KDE session as root user. But
again, I think this is not the case we are talking about, unless I have
understood it in the wrong way.



> For me, I have no reason to use root_GUI_login since I can do everything
> I need without it. Every tiny bits count when it comes to security.

Roor login or launching an app as root?

>> > FYI:
>> > If you are doing this for debug purpose, you can change user on
>> > console using su or sudo under proper configuration done from root.
>> > When switching to root, you need to preserve environment to get
>> > connected to X, as you might have known.
>>
>> Running a X app after "su -" has been failing for some time, I'm afraid
>> this is not an option anymore.
>>
>> stt008:~# firefox
>> Error: no display specified
>
> try "su -p ;firefox".

It happens nothing in my lenny (I become root, but firefox is not
launched). Maybe "su -p" and then run "firefox" but it keeps my user's
setting that is not what I would need. I need root's ones.

> I wrote the above after double checking this works now for firefox
> still :-) This is because values of the old user's "$XAUTHORITY" and
> "$DISPLAY" environment variables must be copied to the new user's ones.

Yes, but running in that way does not help for several cases.



> Do not try to peek into unsafe URLs.

It's just for testing! Nobody will browse the web every day from a root's
account.



> Anyway, please think twice before playing with fire.

We need to play with fire... sometimes :-)

Greetings,

--
Camaleón


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/pan.2011.07...@gmail.com

Thierry Chatelet

unread,
Jul 2, 2011, 7:40:01 AM7/2/11
to
On Friday 01 July 2011 21:07:25 T Elcor wrote:
> Hi,
>
> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste Konqueror to
> Konqueror-2) 3. Goto the "Advanced" tab and check the "Run as a different
> user" checkbox 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the bottom but it
> doesn't run.
>
> Any ideas? Thanks
>
>
>
>
> # uname -a
> Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan 12 03:40:32 UTC 2011 x86_64
> GNU/Linux


Tried rightnow under wheezy:
Right click the KMenu thingie then Edit Applications...
Add an new entry: Konqueror2 go to advance tab, run as root.
Done
It works here
Thierry


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/201107021329.4...@free.fr

Osamu Aoki

unread,
Jul 2, 2011, 9:40:02 AM7/2/11
to
Hi,

On Sat, Jul 02, 2011 at 10:57:15AM +0000, Camaleón wrote:
...
> I only have 2 users in my debian box: me and root.

You can create new account from GUI, too.

> When I need to test if there is a configuration issue with the browser
> (or my Gnome profile), I launch it as root because it has an almost empty
> firefox profile.
>
> And it is also understandable that new users prefer to edit some files
> with Kwrite or Gedit instead by using another command line tools, though
> not a perfect way to make things. New users will learn this in their way
> to linux...

Goof to hear, it is purely for testing. maybe I was worried too much.

But, if so, why not create an dummy user account? And use it for
testing. It is a very good way to test upgrade issues with local
configuration data. By using dummy account, removing it is very easy
and will not cause lasting issues for your root account.

Good luck,

Osamu

--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/2011070213...@debian.org

Camaleón

unread,
Jul 2, 2011, 10:40:01 AM7/2/11
to
On Sat, 02 Jul 2011 22:18:32 +0900, Osamu Aoki wrote:

> On Sat, Jul 02, 2011 at 10:57:15AM +0000, Camaleón wrote: ...
>> I only have 2 users in my debian box: me and root.
>
> You can create new account from GUI, too.

Yes, and I was just talking from my POV and a concrete scenario. I know
how dangeours can be running applications and the whole session from a
root account.

>> When I need to test if there is a configuration issue with the browser
>> (or my Gnome profile), I launch it as root because it has an almost
>> empty firefox profile.
>>
>> And it is also understandable that new users prefer to edit some files
>> with Kwrite or Gedit instead by using another command line tools,
>> though not a perfect way to make things. New users will learn this in
>> their way to linux...
>
> Goof to hear, it is purely for testing. maybe I was worried too much.

And your remainder to avoid it as much as possible is a very good advice
we should not forget :-)

> But, if so, why not create an dummy user account? And use it for
> testing. It is a very good way to test upgrade issues with local
> configuration data. By using dummy account, removing it is very easy
> and will not cause lasting issues for your root account.

I agree. On my testing machines I have setup many user accounts, besides
the root and the usual one, each of one holding different setups and
layouts (differenet locales, different desktop environments...).

But there can be still the need, of let's say, launching gedit to make a
change on a configuration file or running a program as root to discard a
permissions issue and here, using a plain user account won't help.

But again, I fully agree with your view, these have to be expecional
cases -to make a quick test or when specific problem arises- and should
not be done unless stricly need it.

Greetings,

--
Camaleón


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/pan.2011.07...@gmail.com

William Hopkins

unread,
Jul 2, 2011, 12:20:01 PM7/2/11
to
On 07/01/11 at 03:20pm, T Elcor wrote:
> --- On Fri, 7/1/11, William Hopkins <we.ho...@gmail.com> wrote:
>
> > Try the same command from a terminal window, and see what
> > errors you get.
>
> luser@testbox:~$ kdesu konqueror
> bash: kdesu: command not found
> luser@testbox:~$ whereis kdesu
> kdesu: /usr/share/man/man1/kdesu.1.gz
> luser@testbox:~$ which kdesu
>
>
> # dpkg -S kdesu
> kdebase-runtime: /usr/lib/kde4/libexec/kdesu
>
> # ls -l /usr/lib/kde4/libexec/kdesu
> -rwxr-xr-x 1 root root 54720 Jul 20 2010 /usr/lib/kde4/libexec/kdes

It seems generally that your paths must be wrong since it is installed. What is
your $PATH and can a KDE user compare to their own?

The fact that neither which nor whereis return it is normal, FYI. Well, perhaps
which should if your paths are correct. But whereis searches only certain
directories.

Also try running the command again with the full path, i.e.
/`usr/lib/kde4/libexec/kdesu konqueror` just to ensure you have no other
difficulties.

--
Liam

signature.asc

T Elcor

unread,
Jul 2, 2011, 2:20:02 PM7/2/11
to
--- On Fri, 7/1/11, Scott Ferguson <prettyfly....@gmail.com> wrote:

> What you have described is not sufficient to enable a
> hidden menu entry.

> It is unclear to me that you followed all the steps I
> outlined, please
> confirm that you did the following. *Pay particular
> attention to step 2.*

Yes, I missed the step 2. Now I've tried it and the "File Manager - Super User Mode" behaves seemingly in the same non-functional way, that is, shows up in the bottom launch panel like it's starting up, hangs there for about 15 secs, then shuts down/disappears. But it doesn't work.


> NOTE: for future reference - a command line suggestion
> prefaced by $
> means run as user, # means run as root.

> it's a good idea to only run commands as root *when no other way is possible* ;-)

Good point, I agree.


> >> Assumption: you're running Squeeze (from uname
> -r)??
> >
> > # uname -a Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan
> 12 03:40:32
> > UTC 2011 x86_64 GNU/Linux
>
> Is that yes??

Yes, I'm running squeeze.


> Please post the entire, unmodified /etc/apt/sources.list

$ cat /etc/apt/sources.list
#
# deb cdrom:[Debian GNU/Linux squeeze-di-rc2 _Squeeze_ - Official Snapshot amd64 NETINST Binary-1 20110121-20:07]/ squeeze main

deb http://ftp.us.debian.org/debian/ squeeze main
## add non-free to install: unrar
deb http://ftp.us.debian.org/debian/ squeeze non-free
# security updates
deb http://security.debian.org/ squeeze/updates main

# Optionally install sources
#deb-src http://ftp.us.debian.org/debian/ squeeze main
#deb-src http://security.debian.org/ squeeze/updates main


>
> Also the output, if any, of:-
> $ dpkg --get-selections sudo

$ dpkg --get-selections sudo
No packages found matching sudo


> > I remember there was a way to access "Run as a
> different
> > user" functionality from the Alt+F2 feature (when you
> click on the
> > "wrench") but now it seems to have gone.
>
> ??

By the wrench I mean an icon that resembles the wrench, you can see it on the left side of the Alt+F2 window. As I remember, a while ago it was possible to run an app through Alt+F2 and specify "Run As a different user" settings. Once you selected an app to run you'd click on the similar looking "wrench" icon next to the selected app and it would open a new window where you'd specify "Run As a different user" settings. Now I can no longer find a way to do that. Perhaps they removed that plugin or whatever from Alt+F2.


> It seems generally that your paths must be wrong since it is installed.
> What is your $PATH and can a KDE user compare to their own?

$ echo $PATH
/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games


Thanks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309630545.64064...@web121916.mail.ne1.yahoo.com

T Elcor

unread,
Jul 2, 2011, 2:30:01 PM7/2/11
to

Good point, I agree.

Anyway, I just discovered I can't run konqueror from Alt+F2 even without switching the user, with the similar non-functional effects: it starts, shows up in the app panel, hangs there for about 15 secs and then shuts down. Dolphin runs fine. Kwrite runs fine. Kate runs fine.

Weird. I use konqueror every day, the only difference I start it by clicking on the respective System tray icon or from the Favorites menu. And it works fine.

> It seems generally that your paths must be wrong since it is installed.
> What is your $PATH and can a KDE user compare to their own?

$ echo $PATH
/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games


Thanks

--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309631265.46836...@web121910.mail.ne1.yahoo.com

T Elcor

unread,
Jul 2, 2011, 3:00:03 PM7/2/11
to
--- On Sat, 7/2/11, T Elcor <tel...@yahoo.com> wrote:

> Anyway, I just discovered I can't run konqueror from Alt+F2
> even without switching the user

Never mind, it's fine.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309632753.34957...@web121915.mail.ne1.yahoo.com

T Elcor

unread,
Jul 2, 2011, 6:30:02 PM7/2/11
to
--- On Fri, 7/1/11, T Elcor <tel...@yahoo.com> wrote:

> Am having problems running KDE apps as root. To reproduce:
> 1. Open the KDE Menu Editor
> 2. Setup a new app item (for example, copy and paste
> Konqueror to Konqueror-2)
> 3. Goto the "Advanced" tab and check the "Run as a
> different user" checkbox
> 4. Type "root" in the username box
> 5. Save changes
> 6. Run Konqueror-2 from the KDE Kickoff Application
> Laucher.
>
> Konqueror-2 shows up briefly in the applicaton panel at the
> bottom but it doesn't run.


Considering that I was going to need a couple of apps from testing anyway, I decided to upgrade to testing/wheezy. After upgrade the procedure described above worked fine from the very first time, konqueror runs as root without any issues.

Not sure why it didn't work in squeeze. Thanks to everybody for help.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309645372.46770...@web121919.mail.ne1.yahoo.com

Scott Ferguson

unread,
Jul 2, 2011, 11:50:02 PM7/2/11
to
On 03/07/11 04:15, T Elcor wrote:
> --- On Fri, 7/1/11, Scott Ferguson <prettyfly....@gmail.com>
> wrote:
>
<snipped>

>
> Yes, I missed the step 2. Now I've tried it and the "File Manager -
> Super User Mode" behaves seemingly in the same non-functional way,
> that is, shows up in the bottom launch panel like it's starting up,
> hangs there for about 15 secs, then shuts down/disappears. But it
> doesn't work.

Well, at least the problem is consistent :-)

<snipped>


>
>>>> Assumption: you're running Squeeze (from uname
>> -r)??
>>>
>>> # uname -a Linux testbox 2.6.32-5-amd64 #1 SMP Wed Jan
>> 12 03:40:32
>>> UTC 2011 x86_64 GNU/Linux
>>
>> Is that yes??
>
> Yes, I'm running squeeze.

Thanks

>
>
>> Please post the entire, unmodified /etc/apt/sources.list
>
> $ cat /etc/apt/sources.list # # deb cdrom:[Debian GNU/Linux
> squeeze-di-rc2 _Squeeze_ - Official Snapshot amd64 NETINST Binary-1
> 20110121-20:07]/ squeeze main
>
> deb http://ftp.us.debian.org/debian/ squeeze main ## add non-free to
> install: unrar deb http://ftp.us.debian.org/debian/ squeeze
> non-free # security updates deb http://security.debian.org/
> squeeze/updates main
>
> # Optionally install sources #deb-src
> http://ftp.us.debian.org/debian/ squeeze main #deb-src
> http://security.debian.org/ squeeze/updates main
>

Looks normal - I was just checking in case you were using mixed
repositories....

>
>>
>> Also the output, if any, of:- $ dpkg --get-selections sudo
>
> $ dpkg --get-selections sudo No packages found matching sudo
>

And yet you say it "was" originally enabled... (?) :-/

>
>>> I remember there was a way to access "Run as a
>> different
>>> user" functionality from the Alt+F2 feature (when you
>> click on the
>>> "wrench") but now it seems to have gone.
>>
>> ??
>
> By the wrench I mean an icon that resembles the wrench, you can see
> it on the left side of the Alt+F2 window. As I remember, a while ago
> it was possible to run an app through Alt+F2 and specify "Run As a
> different user" settings. Once you selected an app to run you'd click
> on the similar looking "wrench" icon next to the selected app and it
> would open a new window where you'd specify "Run As a different user"
> settings. Now I can no longer find a way to do that. Perhaps they
> removed that plugin or whatever from Alt+F2.
>

If I type konqueror into it - a drop-down list appears with konqueror in
it - on the right-hand side of it is the wrench icon you refer to.
http://ge.tt/9pOmkd5/v

>
>> It seems generally that your paths must be wrong since it is
>> installed. What is your $PATH and can a KDE user compare to their
>> own?

That was someone else's statement, not mine. Not saying it's incorrect,
just that the thread is muddled.

>
> $ echo $PATH
> /usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
>
>
> Thanks
>
>

For comparison, mine:-


$ echo $PATH
/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games

$ groups
scott disk dialout cdrom floppy audio dip video plugdev mlocate powerdev
vboxusers clamav

root's:-
# echo $PATH
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

Regrettably I don't have time to pursue this at present.
Some suggestions (shooting in the dark):-

# dpkg-reconfigure libkdesu5 (the same with any other relevant packages
likely to be misconfigured)

Check /var/mail/user_name, /var/log

Examine /etc/login.defs and /etc/pam.d for problems
If you can determine "when" you lost the ability then examining dpkg
logs might give you some clues.

If, after that you're still stymied, enable su logging in
/etc/login.defs and try using su. Eg.:-
$ su
Then check the su log.

NOTE: kdesu no longer appears to be used, instead kde makes use of
kdesu_stub

refs:- man kdesu_stub

Good luck.

--
“You know, there were rumours
of anti-Castro pigeons seen drinking in bars...
Someone overhead them saying:
- "coup, coup"”
~ Bill Hicks (on the Kennedy assassination)


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/4E0FE604...@gmail.com

T Elcor

unread,
Jul 3, 2011, 12:50:02 AM7/3/11
to
--- On Sat, 7/2/11, Scott Ferguson <prettyfly....@gmail.com> wrote:

> >>
> >> Also the output, if any, of:- $ dpkg
> --get-selections sudo
> >
> > $ dpkg --get-selections sudo No packages found
> matching sudo
> >
>
> And yet you say it "was" originally enabled... (?) :-/

Yes, it was working a while ago in squeeze and it's working now in wheezy, which I just upgraded to. In both cases sudo wasn't/isn't installed.

## Running wheezy now
$ uname -a
Linux textbox 2.6.39-2-amd64 #1 SMP Wed Jun 8 11:01:04 UTC 2011 x86_64 GNU/Linux

$ dpkg --get-selections sudo
No packages found matching sudo.


> If I type konqueror into it - a drop-down list appears with
> konqueror in
> it - on the right-hand side of it is the wrench icon you
> refer to.
> http://ge.tt/9pOmkd5/v

I see drop-down list, I see konqueror but the "wrench" is still not there for me, even on wheezy. Weird.


> Regrettably I don't have time to pursue this at present.
> Some suggestions (shooting in the dark):-

I got it partially working so it's no longer critical, though ideally I'd like to find out what happened to my "wrench" in Alt+F2.

Thanks for your help.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/1309668160.59756...@web121909.mail.ne1.yahoo.com

0 new messages