Re: [gentoo-hardened] novice question regarding SU and TTY

[Vieri]

--- Vieri <rentorbuy@×××××.com> wrote:

> Hi,
>
> I've recently installed a gentoo box with the
> hardend
> profile + hardened-sources so I'm new to all this.
>
> I have two basic questions that I can't seem to
> answer.
>
> 1) SU:
> on the non-hardened gentoo box I'm used to, I can
> enter as root and then do a "su username" and a
> whoami
> shows that username. However, in the hardened box,
> issuing "su username" doesn't do anything and whoami
> is still root. I can't see any log messages related
> to
> this. Is this behavior normal?
>
> 2) TTY:
> on my non-hardened gentoo I emerged sys-power/nut
> which is a UPS monitoring tool and needs to access
> /dev/ttySx. The nut driver is supposed to run under
> the nut user/group which is also part of the tty
> group. In other words, the application has correct
> access to the device. However, in my hardened box
> after emerging without errors and verifying that the
> nut user was added to the tty group, the nut app
> fails
> when trying to access /dev/ttyS0 and reports
> "permission denied".
>
> I'm sure all this is due to my lack of experience
> but
> could someone please give me the big picture.
>

May I add:

non-hardened # ls -la /dev/ttyS0
lrwxrwxrwx 1 root root 5 Apr 27 12:39 /dev/ttyS0 ->
tts/0

hardened # ls -la /dev/ttyS0
crw-rw---- 1 root uucp 4, 64 May  8 00:19 /dev/ttyS0

Do I just need to manually change permissions for this
device?

> Thank you.
>
> Vieri


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
gentoo-hardened@g.o mailing list