IRC and Root


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers IRC and Root
# 1  
Old 01-21-2005
IRC and Root

dear members...
i am a newbie to unix, i am using the SUSE professional 9.2
i noticed many places, that when i am using IRC , i shouldn't be logged into the root account..
also when i switch the GPSdrive, it mentions to me that it is not goo to be logged thru the root account.
what is wrong if i was in a root account while using these apps?
thank you
# 2  
Old 01-22-2005
Being root on a system opens you up to a lot of catastrophes, such as accidently issuing a rm -rf command, wiping your system completely clean. The reason MS Windows has problems with Virii is lack of user security. Anything and everything can be executed, and run from your account.
Root can execute any commands on the system that can damage your system. Someone could create a shell script which can force installation of trojan apps onto your system. If you were a user, then running such a script would limit the shell script from installing potentially damaging software.
With GNU/Linux, you can create many user accounts, and use su to temporarily become root, for installing packages, or better, use sudo to run installation programs.
What makes *NIX such a stable system is the file permissions, user permissions, by being root full-time you are loosing this extra security.
There is no reason you should be using your system under a root account. If you do not know how to make a user, ask that question.
# 3  
Old 01-22-2005
thank you locustfurnace for your reply...
Well what you said, i basicly know it, an di know how to create a user, i already have...
But how could a user over the internet make a script, and let it run onto my PC, unless i run it by myself??
then, as a GPS application, as i know GPS will collect data from a known source, which is pre defined by the GPS application, like if i set the unix.com as a authorative site, that i don;t mind receiving things from it, so i don;t care if it is malicious...
thank you
# 4  
Old 01-22-2005
Quote:
Originally Posted by 9613315400
t
But how could a user over the internet make a script, and let it run onto my PC, unless i run it by myself??
Someone could DCC something to you on IRC.
If the IRC client has a discovered exploit, and if someone issues a CCTP, finger, whois...etc, to you, instead of getting information about your account, the exploit could be made to run a system command, causing damage to your system.
All the known issues today never means tomorrow something will not be discovered which could be extremely damaging.
Running as root may be OK today, but tomorrow a discovered hole in a program could be used to attack your system. Not all discovered holes in software code are public knowledge either.
If your box becomes compromised, then it could be used as a zombie to partake in further attacks.
This undermines one of the reasons to use GNU/Linux, is its security.
Is there really a reason you must be a logged in as root?
# 5  
Old 01-22-2005
got the point

okeys locustfurnace, I think now i am ok, i got your point..Smilie
thank you , and sorry for any disturbance.
basicly i don;t use IRC, but i heared this issue from many persons, so i just wanted to get the point.
 
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. SCO

Irc port

does anyone know of a port of irc like irssi for unixware? thanks (3 Replies)
Discussion started by: deus-programmer
3 Replies

2. Solaris

Migration of system having UFS root FS with zones root to ZFS root FS

Hi All After downloading ZFS documentation from oracle site, I am able to successfully migrate UFS root FS without zones to ZFS root FS. But in case of UFS root file system with zones , I am successfully able to migrate global zone to zfs root file system but zone are still in UFS root file... (2 Replies)
Discussion started by: sb200
2 Replies

3. Shell Programming and Scripting

Using ii for irc chat - scripting assistance?

I am using ii for irc on my pogoplug... hxxp://hg.suckless.org/ii/file/d163c8917af7/FAQ If you look at the bottom of there, it states 31 What other fancy stuff can I do with ii? 32 ---------------------------------------- 33 It is very easy to write irc bots in ii: 34... (3 Replies)
Discussion started by: spartan2006
3 Replies

4. UNIX for Dummies Questions & Answers

My domain name as my IRC hostname?

When I connect to any IRC server, it's usually my ISP IP address/hostname. I own a domain, but I'm not using it for anything (no web hosting service or server). Is it possible for me to use my domain as my IRC hostname instead of my regular ISP hostname? (0 Replies)
Discussion started by: guitarscn
0 Replies

5. Shell Programming and Scripting

How to setup a shell to use IRC behind firewall help

So, I have a free shell from an online provider which offer IRC access, I am behind a firewall blocking all IRC ports @ work, how can I use the Shell to get on IRC from work? What do I need to setup on the shell to be able to connect to the shell on the ssh port which allows connections from work,... (10 Replies)
Discussion started by: KromiX
10 Replies

6. UNIX for Dummies Questions & Answers

Where is Mozilla IRC Client on SuSE?

I have grown to love the IRC client built into the windows version of the Mozilla web browser. I bring up the browser and put irc:// into the URL drop down box and the IRC client pops up in a seperate window. However, when I use the Mozilla browser in SuSE 10, it just says "illegal protocol" or... (1 Reply)
Discussion started by: siegfried
1 Replies

7. Post Here to Contact Site Administrators and Moderators

Irc??

hi there everybody.. i just noticed that there is no forum dedicated to internet relay chat (IRC)... although there are several threads focused on this, i think it is quite better if there is a forum where questions on IRC are tackled head-on in a purely academic level... anyway, this is just... (4 Replies)
Discussion started by: cable21
4 Replies
Login or Register to Ask a Question