[X-Unix] App launched by my crontab runs as root if Login Window!

John Harrold jmh17 at pitt.edu
Fri Jun 3 16:56:30 PDT 2005


Sometime in June ~flipper assaulted the keyboard and produced:

| John Harrold wrote:
| 
| >I'm not sure what you mean by enabled. I don't think you can disable the
| >'root' user on a unix machine and have it work. Every time you run sudo it
| >executes commands as root. This would not be possible if the 'root' user
| >was disabled.
| 
| So, with 'root' disabled. (a misnomer, since root is not enabled in 
| the first place, having no password, no shell default, no console 
| access, etc)...

The user root may not have a password, but does have a shell. I don't know
about OS X, but I believe if root didn't have a shell it would break
many things which runs as root (i.e. daemons). I assume the login menu runs as
root.  According to the netinfo manager on my computer, root's shell is
/bin/sh.  I'm not sure what you mean by console access.  You can su to
root:

$ sudo su -

True, you cannot login as root, but programs can still be run as root.
Typically when I think of disabling a user, their shell is set to
/usr/bin/false.

-- 
---------------------------------------------------------- 
                            | /"\                         
 john harrold               | \ / ASCII ribbon campaign   
 jmh at member.fsf.org      |  X  against HTML mail       
 the most useful idiot      | / \                         
----------------------------------------------------------
 What difference does it make to the dead, the orphans, 
 and the homeless, whether the mad destruction is brought 
 under the name of totalitarianism or the holy name of 
 liberty and democracy?
 --Gandhi
----------------------------------------------------------
  gpg --keyserver pgp.mit.edu --recv-key B23241CB
----------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://listserver.themacintoshguy.com/pipermail/x-unix/attachments/20050603/70d937ad/attachment.bin


More information about the X-Unix mailing list