Where's Konqueror in SU

[Rick Stevens]

Michal Jaegermann wrote:
> On Thu, Nov 05, 2009 at 12:14:44PM -0500, Jim wrote:
>>>   
>> Would someone explain to me what is the detrimental  difference between 
>> a Gui or command line, logging in to root from the same box .
> 
> Complexity.  The more programs are involved the harder they become
> to secure.  With specialized tools that can be manageable and you
> can tell that a trade-off of a small GUI is worth it but you are
> talking about a "kitchen sink" application here.
> 
>> Most of the people that over reacted to question was they looked at 
>> Konqueror as a Web Browser, not realizing it is also a File Manager.
> 
> And also..., and also..., and ... Here is the issue.  "Big" web
> browsers are complicated beast and chances for forgotten "dark
> corners" and unwanted/unexpected interactions grow exponentially
> with size.  Root should be much more careful as effects of a
> hypothetical compromise are far reaching.

You only need to look at the guano that is Internet Explorer to prove
how incestuous and dangerous a web browser/file manager/media manager/
swiss army knife app can get.  Other GUI apps can be just as
detrimental.  A security hole in any of them can be disastrous.

These are the main reasons why the default for F10-F12 is to not permit
the root user to log in as a GUI user--specifically to keep people from
shooting themselves in the foot.  If you really need a GUI for certain
tasks you want root to do, the "bring up a command line, 'su -' in it
and run the GUI app you want from there" is a reasonable compromise.  If
you really, really want root to log in as a GUI, follow the instructions
in the Wiki.  It's not hard to do.

I've been a Linux admin for well over 15 years and I've yet to see when
I really _need_ root to have a GUI.  It's nice on occasion, but you use
it (and anything as root) at your own risk.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      ricks at nerd.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
-   NEWS FLASH! Intelligence of mankind decreasing!  Details at...   -
-     uh, when, uh, the little hand is, uh, on the...  Aw, NUTS!     -
----------------------------------------------------------------------