Root user permission

[Peter N. Spotts]

Marcelle Soares-Santos wrote:
> well, let me put my curious finger on this discussion.
> 
> in my computer I have set a root password with "sudo passwd root", but,
> some applications ask me my psswd (the passwd of the first user I've
> created). why does this happen? shouldn't they ask for the root
> passwd? I think this would be more logical...
> 
> I would like to change my passwd, but because of that I'm afraid I'll
> have trouble in running those applications. If I change my password
> what is gonna happen? Those applications will ask me my new passwd or
> the old one?  Will I have to memorise three different passwds (the
> actual, the root and the new one) ?!
> 
> Is there a way to make all the applications ask for the root passwd
> only? Is that something "non-recommended"? Why (not)?
> 
> sorry if my questions are silly. actually, I've been wondering about
> them for a long time, but never had the opportunity to ask...
> 
> thanks, marcelle.
> 

Marcelle,

I'm sure someone else will correct me if I'm wrong, but the dual 
password system is considered more secure -- root has access to programs 
and processes that if mishandled can really ruin your day at your 
computer. A user's access is restricted, reducing the chance of mucking 
up something he or she shouldn't, while still allowing each individual 
user his or her own relatively secure space. Root has dominion over the 
entire system, while users generally are allowed to ramble only within 
their alloted turf. Ubuntu has split the difference by asking a user to 
reenter his or her password if they are about to engage in a root-like 
activity, such as installing software system-wide or setting up network 
configurations. In effect, having to enter your password to perform a 
system-administrator function it a bit like the system asking you: Are 
you *really* sure you want to do this?

Pete

-- 
Peter N. Spotts | Science reporter
The Christian Science Monitor
One Norway Street, Boston, MA 02115 USA
Office: 617-450-2449 | Office-in-home: 508-520-3139
Email: pspotts at alum.mit.edu | Amateur radio call: KC1JB
www.csmonitor.com | www.peterspotts.net