su command - Security concerns

Protecting your Linux box
Post Reply
phoenix
Havaldaar
Posts: 105
Joined: Wed Jan 18, 2006 4:02 pm
Location: Islamabad
Contact:

su command - Security concerns

Post by phoenix »

AoA

How safe it is to 'su' while internet in on?

supose I want to change ownership of some
file, should I 'su' from the user account, with
X on, internet on; OR

should I do CTRL+SHIFT+FX and login as 'root'
there?

which one is better?
I'm using Slackware 11.
__/__/__/__/__/__/__/__/__/__/__/__/
Pakistan - Kashmir
__/__/__/__/__/__/__/__/__/__/__/__/
nomankhn
Colonel
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Re: su command - Security concerns

Post by nomankhn »

Dear

su is good option.

Regards
Noman Liaquat Khanzada Rajput
Linux means productivity and fun.
We all love Linux, but it's also a fact that some people might not be able to migrate.
lambda
Major General
Posts: 3452
Joined: Tue May 27, 2003 7:04 pm
Location: Lahore
Contact:

Re: su command - Security concerns

Post by lambda »

phoenix wrote:How safe it is to 'su' while internet in on?
look, we can't turn off the internet just so you can type your root password. there are millions of people and computers on the internet. they can't go offline for you.

as long as your connection to the system is either at the console or over an encrypted link (like ssh), and no one's installed a keylogger, or is able to read keystrokes off your x window session, it's safe to type 'su'.

in fact, it's safer to use sudo.
LinuxFreaK
Site Admin
Posts: 5132
Joined: Fri May 02, 2003 10:24 am
Location: Karachi
Contact:

Re: su command - Security concerns

Post by LinuxFreaK »

lambda wrote:
phoenix wrote:How safe it is to 'su' while internet in on?
look, we can't turn off the internet just so you can type your root password. there are millions of people and computers on the internet. they can't go offline for you.

as long as your connection to the system is either at the console or over an encrypted link (like ssh), and no one's installed a keylogger, or is able to read keystrokes off your x window session, it's safe to type 'su'.

in fact, it's safer to use sudo.
indeed
Farrukh Ahmed
Post Reply