Michal Jaegermann wrote:
On Thu, Nov 05, 2009 at 12:14:44PM -0500, Jim wrote:
Would someone explain to me what is the detrimental difference between a Gui or command line, logging in to root from the same box .
Complexity. The more programs are involved the harder they become to secure. With specialized tools that can be manageable and you can tell that a trade-off of a small GUI is worth it but you are talking about a "kitchen sink" application here.
Most of the people that over reacted to question was they looked at Konqueror as a Web Browser, not realizing it is also a File Manager.
And also..., and also..., and ... Here is the issue. "Big" web browsers are complicated beast and chances for forgotten "dark corners" and unwanted/unexpected interactions grow exponentially with size. Root should be much more careful as effects of a hypothetical compromise are far reaching.
You only need to look at the guano that is Internet Explorer to prove how incestuous and dangerous a web browser/file manager/media manager/ swiss army knife app can get. Other GUI apps can be just as detrimental. A security hole in any of them can be disastrous.
These are the main reasons why the default for F10-F12 is to not permit the root user to log in as a GUI user--specifically to keep people from shooting themselves in the foot. If you really need a GUI for certain tasks you want root to do, the "bring up a command line, 'su -' in it and run the GUI app you want from there" is a reasonable compromise. If you really, really want root to log in as a GUI, follow the instructions in the Wiki. It's not hard to do.
I've been a Linux admin for well over 15 years and I've yet to see when I really _need_ root to have a GUI. It's nice on occasion, but you use it (and anything as root) at your own risk. ---------------------------------------------------------------------- - Rick Stevens, Systems Engineer ricks@nerd.com - - AIM/Skype: therps2 ICQ: 22643734 Yahoo: origrps2 - - - - NEWS FLASH! Intelligence of mankind decreasing! Details at... - - uh, when, uh, the little hand is, uh, on the... Aw, NUTS! - ----------------------------------------------------------------------