Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [root]

root is the default administrative account for Unix-based systems. It is comparable to the Administrator account of a Windows system.

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

How is MFA on single root accounts reconciled with the bus factor [closed]

Various SaaS services are beginning to require or strongly recommend MFA for the root account on the service. With some of these accounts, there are tasks that can only be done from a root/owner/...
user avatar
1 vote
1 answer
40 views

mariaDB 10.5.12 access denied for root@127.0.0.1

fresh installation of mariaDB 10.5.12 on debian 11 was hardened with 'mysql_secure_installation' script, question "Switch to unix_socket authentication [Y/n]" was answered with 'yes'. Now ...
user avatar
  • 11
0 votes
2 answers
33 views

Sshd root login errors even though root logins are disabled - how to solve?

On my Linux server (Ubuntu 18.04.6 LTS) I have set PermitRootLogin no in /etc/ssh/sshd_config and reloaded the config with sudo service sshd reload But I am still seeing Mar 14 06:18:02 myhost sshd[...
user avatar
18 votes
9 answers
3k views

root login or sudo user for server administration?

I'm trying to understand the technical arguments/security implications between ssh'ing with root directly, or making an auxiliary sudo user in the context of maintaining a server. To clarify, we're ...
user avatar
  • 183
0 votes
1 answer
63 views

How to disable Root Access, to VPS, via SSH?

I run a VPS, on a Linux Server, with CentOS 7 (64 bits) being the chosen Operating System. I have recently wiped the VPS, so it only has a clean install of Plesk Onyx at the moment. I would now like ...
user avatar
  • 135
0 votes
0 answers
245 views

ufw failed to be initialized

I just make a fresh Docker container. But, when I try to enable ufw, I get the following error message: # ufw enable ERROR: problem running ufw-init modprobe: ERROR: ../libkmod/libkmod.c:586 ...
user avatar
  • 101
0 votes
1 answer
160 views

cron/php how to run command as a non root user

I need to run command (only one command) as a non root user from cron. Have tried two versions and both fails; Cron: * * * * * php script.php script.php: exec("whoami"); // returns 'root' //...
user avatar
  • 107
1 vote
1 answer
200 views

Should both root and wheel users own the files that originally were only owned by root?

Should a wheel user that was created to disable root login and secure SSH have the same ownership as root from a security point of view?
user avatar
1 vote
1 answer
432 views

Amazon EC2 instance is out of space because "root" file is gigantic

I've been working lately on an AWS EC2 instance with ubuntu. This is my first experience working with servers, so I'm really new to this. Lately I've noticed my free space has completely filled up for ...
user avatar
  • 11
1 vote
2 answers
66 views

Is there a rights managment system for linux in company networks for local root support?

I work at a large research institute (10k users) with various systems (Mostly Windows and Ubuntu Linux). I am not an expert in such network structures but I work at home with Ubuntu myself and like to ...
user avatar
  • 13
0 votes
1 answer
176 views

nginx - subfolders alias include all subfolder

I'm currently trying to fiddle around with a location block that has a different root. However I have some issues when accessing files that are in a subfolder on the different root. Here is my broken ...
user avatar
  • 23
0 votes
1 answer
29 views

VM in Read-Only - no commands executed

A Ubuntu 18.04 LTS server VM has entered Read-Only Mode, to the point that basic commands such as ls are not executed anymore, and return the error message -bash: /usr/bin/ls: Input/output error, ...
user avatar
1 vote
0 answers
68 views

How can a file be visible to a regular user but non-existent to root?

I have asked this question yesterday but it was marked as duplicate and closed because of its context, as it was thought to be an X/Y question, whereas I was just interested in the general matter of &...
user avatar
0 votes
0 answers
39 views

Which permissions does a Linux executable file has when it is executed by root?

I am using CentOS 6.8. I have an executable called railgun, whose user and group are both set to root. I then use the root user to start it as a service, as below: service railgun start However, it ...
user avatar
  • 171
2 votes
1 answer
324 views

Is the root user able to administer screen for other users?

We're trying to rewrite a draconian screen session killer for users who leave their screen sessions up for an inordinate amount of time and have in some way or other circumvented our session timeouts. ...
user avatar
  • 2,408
1 vote
0 answers
27 views

Why a non-root installation can work across the whole cluster?

I recently installed anaconda (which includes a new python3) locally in my account folder on a cluster with a dozen of nodes (each node with several cores). I use it to install some package P that is ...
user avatar
0 votes
2 answers
93 views

Is SSH remote execution more secure as local non-root?

Is there a security benefit running a command remotely via ssh as a local non-root user? In other words, is this actually more dangerous compared to executing the ssh command as non-root: root@local:~#...
user avatar
  • 11
0 votes
0 answers
62 views

Why is my Samba share only writable by root?

I have set up a Samba share, and it is only writable by root. For example, I can only create a folder on that share with sudo: ~$ mkdir /mnt/SHARE/somedir mkdir: cannot create directory /mnt/SHARE/...
user avatar
1 vote
0 answers
140 views

namespace - nobody to root mapping

I'd like to create new user namespace being root with the command: # unshare -U bash $ echo $$ 3500 $ id uid=65534(nobody) ... etc After that I edit /proc/3500/uid_map im my initial namespace as root:...
user avatar
4 votes
2 answers
3k views

Why is the root home directory, /root not in /home? (looking for reasons other than /home is mounted on a different drive)

i know that one reason for /root not being in /home is that usually /home is mounted on a different disk and if it were to fail, we still want root to be accessible. What are some of the other reasons ...
user avatar
  • 77
0 votes
1 answer
117 views

FreeIPA - ssh as root prompted for password

I know the access via root won't work (client sshd_config and restricted account in FreeIPA). But is there a way to blacklist root either on the host or on FreeIPA so it's denied immediately rather ...
user avatar
0 votes
0 answers
14 views

On an Azure hosted RHEL instance, how could the Tomcat service get started as root when the .service file specifies a user?

We have 3 RHEL servers running in 3 different Azure regions. All 3 have been running Tomcat, as a service, as the expected non-root user that is specified in the .service file, for months. On the 25/...
user avatar
  • 11
0 votes
2 answers
138 views

Linux: Is it possible to use the ssh key pair instead or in addition to the root privileges?

I'm facing the problem of securing an embedded platform. All ssh hardening have been setup, including 2 factor authentication and login with ssh key pairs. Now, the root and user passwords are ...
user avatar
2 votes
3 answers
528 views

Any point in running containers as non-root on openshift

The openshift documentation reads : To further protect RHCOS systems in OpenShift Container Platform clusters, most containers, except those managing or monitoring the host system itself, should run ...
user avatar
0 votes
2 answers
47 views

Bash-script: run another script on bottom as an other user

I have a bash script that runs over crontab as root. On the bottom of that script I want to run another bash script as another user in a subshell (detached). How can I do that The normal command would ...
user avatar
  • 43
1 vote
0 answers
71 views

CentOS USER_CMD logs auditd

We are trying to start logging all executed commands by users (including root) on CentOS using auditd with type=USER_CMD, how we can do it? We already getting commands, starting with sudo, but not ...
user avatar
0 votes
1 answer
43 views

Double call to root path "/" in a website

I'm checking my web page performance, but some strange reason it double calls to root path. Any idea why this is happening? Thank you.
user avatar
0 votes
1 answer
831 views

Permission denied var/run/nginx.pid

I get the following error: Permission denied var/run/nginx.pid Inside my nginx docker container the problem is the user running is unprivileged user with a random userid (forced by my company ...
user avatar
  • 111
0 votes
2 answers
22 views

Running newusers util in cron to batch create users does not run [duplicate]

I'm attempting to batch create some users from a file using the newusers util on ubuntu 18. When running in cron as the root user, nothing happens. When I run the command manually, it works as ...
user avatar
  • 117
3 votes
0 answers
379 views

sshd on Fedora: Recent changes to UsePAM break existing security; PermitRootPassword & UsePAM no not honored, minimal PAM config doesn't work either

I did upgrade on a Fedora Server and was SHOCKED to discover thousands of root attacks on my publicly facing servers and I can't seem to figure out how to stop them! To be clear; It IS possible to log ...
user avatar
  • 1,128
0 votes
2 answers
435 views

How to run zabbix agent as root in Ubuntu 14.04?

We have some legacy servers which runs on ubuntu 14.04 and we need to execute zabbix-agentd as root for getting some performance information. zabbix-agentd version = 5.0 I've followed this guide but ...
user avatar
1 vote
2 answers
681 views

Instance does not have a volume attached at root

I recently started trying out EC2 servers and came across an issue when trying to get an instance back up from a snapshot (which is another odd issue I had, because you can't change root snapshots in ...
user avatar
  • 13
1 vote
2 answers
164 views

root user terminal slower than non-root in Debian GNU/Linux 10 (buster)

I have to quantify slow here. It is noticeably slow, but not extreme. Here is a test I did. I pasted the below (time in nanoseconds command) on terminal as a non-root user and then as root user (I ...
user avatar
  • 21
1 vote
1 answer
864 views

Running script as user with root permissions

Due to conflicting and constantly changing permissions on mounted drives (which cannot easily be solved due to the development structure of programs), there is a script that must be run with root ...
user avatar
-1 votes
1 answer
667 views

mysql --innodb_file_per_table

I have a simple question regarding access to mysql via command. When I tried to access it as a root it bounce back a message: mysql: unknown option '--innodb_file_per_table' How would it get it back ...
user avatar
  • 9
-1 votes
1 answer
29 views

Resetting lost root-pwd on CentOS 8 just don't work

i just don't know. I have reset lost root-pwds on Linux boxes maybe 5 times a year in the 30 years experience as IT-Admin, but this time i#m just confused. I just don't manage to login on my CentOS ...
user avatar
  • 111
0 votes
1 answer
1k views

chmod/chown/mkdir: Operation not permitted as root

I get Operation not permitted for root user on one server but not on the other "identical" server. Running on Amazon Linux 1. Server 1: [root@preprod-1 ]# chown root:root /s3mnt/outliers/ ...
user avatar
0 votes
1 answer
117 views

What do I need to do on a minimal CentOS 8 installation to receive root's emails?

I've tried searching but all of the results seem to be about setting up an actual mail server. I just want the simplest solution. I've added my email address to the bottom of /etc/aliases. I've had ...
user avatar
  • 1,034
1 vote
1 answer
144 views

How secure is a "root" password that's 26 alphanumeric characters long?

I was playing around with a DigitalOcean droplet. Linux Ubuntu 18.04. I had a root password about 8 alphanumeric characters long. Port 22. It would take about 3 days for hackers with Chinese IP ...
user avatar
0 votes
1 answer
265 views

Is it a bad idea to use rsync as root to sync /etc/letsencrypt and /etc/nginx between servers?

I have a failover setup with two servers and would like to sync /etc/letsencrypt and /etc/nginx between primary and replica. I am planning on using Match Address on replica to only set PermitRootLogin ...
user avatar
0 votes
0 answers
108 views

Docker containers on startup not visible (started as different user?)

As the title indicates I have a bunch of containers that are set to restart always. Everything works fine as it is but things seem to go wrong when I restart the server (Ubuntu 20.04). The containers ...
user avatar
1 vote
1 answer
1k views

PermitRootLogin yes seems not to be working [closed]

I need to SFTP with my IDE, that's why I set PermitRootLogin yes in sshd_config file. But it's not working I still need to sudo after logging in with password. Here is my full settings file content: ...
user avatar
  • 111
0 votes
1 answer
201 views

How do I regain Root Access, whose Access has been disabled?

I recently decided to disable Root Access, to my VPS, via SSH/PuTTy. This being an obvious effort to increase the security of the VPS. I achieved this by heading into /etc/ssh/sshd_config and ...
user avatar
  • 135
1 vote
0 answers
95 views

ZFS RAIDZ1 root on gentoo fails to boot after disk swap

I have a 3-disk RAIDZ1 array with 3 HDDs: # zpool status ... config: NAME STATE READ WRITE CKSUM gpool ONLINE 0 0 0 raidz1-0 ONLINE 0 0 0 ...
user avatar
  • 220
4 votes
3 answers
750 views

How to intentionally cause ssh root connection refused

Simple, how do I make ssh (port 22) drop/refuse a connection if root@ip_address request is received, but still allow user@ip_address to work properly. Basically hide the fact there's a server at that ...
user avatar
0 votes
0 answers
198 views

Centos 7 - Shrink size of LVM Partition

I have a Centos 7 VM which was built from an OVA template. I have it running under Virtualbox. Issue I have is the VM has a dynamic disk of 200G - but only 4 Gb used. I want to shrink the partition to ...
user avatar
  • 11
0 votes
1 answer
755 views

Using Fail2Ban as non root

What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user. To run for example this command for normal ...
user avatar
1 vote
1 answer
773 views

How do I parse /* or */* to a bash shell script

I am trying to write a script that will let me get the arguments while running the script. I am able to do so with $@ in the script. But if I run the script with /* or */* it gives the list of all the ...
user avatar
0 votes
1 answer
82 views

Monitoring users logged in with SSH-CA (certificates)

I was hoping to get some help with an approach that could be used... I am building out a solution that will use SSH-CA (that is, SSH where authentication is done via certificates). Flow is simple: ...
user avatar
0 votes
1 answer
649 views

Ubuntu Not Detecting Free Space In Root Partition

My server has a 40GB HDD and runs Ubuntu 18.04. The output for the command: sudo lsblk -o NAME,FSTYPE,SIZE,MOUNTPOINT,LABEL returns: NAME FSTYPE SIZE MOUNTPOINT LABEL loop0 squashfs 91....
user avatar
  • 145

1
2 3 4 5
11