Detailed analysis of Ubantu Linux root permissions

Ubantu is a relatively large Linux release version, and the issues related to Linux root permissions are worth discussing. Base on debian, a new ubuntu user), most of them will not know why because the root password is not prompted during installation. According to the ubuntu Chinese document, I have summarized this article. After reading this article, I will be clear about the Ubantu Linux root permission.

How do I set/change/enable the password of the root user?

Sudo passwd root
To enable the root account (that is, set a password:

Sudo passwd root

After you use it, block the root account from using it:

Sudo passwd-l root

This will lock the root account.

In terminal mode, how does one switch to the root identity?

Sudo-s-H
Password: <indicate your Password here> the benefits of disabling root by default include.
At first, the Ubuntu team wanted the installation to be as simple as possible. Without root, the two user interaction steps during the installation can be omitted. (Colin Watson)

Furthermore, if root is used during installation, users will be asked to always remember their selected password-even if they seldom use it. the Root password is often forgotten by users unfamiliar with the Unix security model. (Matt zimuman)

It prevents "I can do anything" during the default logon. Before a major change occurs, you will be prompted to enter a password, which allows you to consider your results. if you log on as the root user, you can delete some "useless Folders" without realizing that you are in the wrong directory. It was too late. it is a Unix practice that uses "su-command-^ D" for a long time, instead of staying in the root shell-unless you do serious system maintenance (then you can still use "sudo su "). sudo adds the log records for running commands (in/var/log/auth. log ). if you are in trouble, you can always return and see the running commands.

Security

Compared with the traditional superuser model, this method has different advantages and disadvantages. Both of them do not always show good results.
When we encourage the use of Linux root permissions to execute a separate command, sudo is better than opening a shell:
Reduces the total time spent on using Linux root permissions, and reduces the risk of not paying attention to using root to execute commands
Provides useful review traces
There is a separate root Password (traditional model) that provides an additional layer of protection when an administrator's password is compromised.
In any case, if the administrator (using sudo or su to become root) is attacked, attackers can generally obtain the root user through an indirect attack.

1. Detailed introduction to Linux USB flash drive boot and installation I) self-guided mode
2. Linux USB flash drive boot installation 2) manual boot
3. Comprehensive Analysis of Linux system management command w
4. Linux compression command 1) tar
5. Comprehensive Analysis of Linux dynamic libraries and windows dynamic libraries