Reply To: [SOLVED] Root privilege remains in force after initial authentication

Forum › Forums › Orphaned Posts › antiX-19 “Marielle Franco, Hannie Schaft, Manolis Glezos, Grup Yorum, Wobblies” › [SOLVED] Root privilege remains in force after initial authentication › Reply To: [SOLVED] Root privilege remains in force after initial authentication

August 9, 2020 at 11:40 am #40043
olsztyn
Member
    Xecure wrote:

    It is by design. sudo session usually lasts about 15 minutes. I prefere THAT to having to write the password every time, but if you are concernd about this, you can change it.

    Thank you Xecure!
    So if I set the timeout to 0 then each time I execute a function requiring root privilege it will require a root authentication regardless which function, as I understand from the article… In such case this will solve my issue. I will test shortly but I trust it should work for me…

    Just to mention, such default of 15 minutes leaving system in root privilege may be convenient for on-going system administration, but for an average user, who after finalizing his environment seldom needs root anymore, this opens 15 minutes window of ultimate vulnerability for antiX.
    Out of curiosity I have checked this issue on two other Linux systems at hand: Intel’s Clear Linux and Pop!_OS Linux and such vulnerability does not exist in either. Both require authentication each time a function requiring root privilege is invoked.

    Thanks very much for prompt help…
    Greatly appreciated.

    Live antiX Boot Options (Previously posted by Xecure):
    http://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters