|
|
||
The Cantankerous Philosophy of Running as Root© Copyright Darrell Anderson. I want to address the philosophy of running a desktop computer as root. The GNU/Linux priesthood will scream about using a box as root and get especially livid about running a box as root in the X graphical environment. Fooey. When I am not connected to the web I often run my Slackware box as root—using KDE no less. I am not embarrassed by my actions, nor will I apologize. I’m a big boy and I accept full responsibility for my decisions. I have been running my personal desktop computers as “root” for 20+ years. Yes, as root users possess the ability to destroy their system. Big deal. When people get behind the steering wheel of their car they possess the ability to destroy property and lives. Yet, statistically, such an act is the exceptional event and not the typical event. Likewise, until the past few years, all desktop personal computers not based upon the Unix model provided that same ability. Most people have survived just fine and have not destroyed their computers. Some of the priesthood will argue that running a box as root means that crackers obtain an easier time hijacking a box. Maybe. First, no cracker can hijack a box that is not connected to any network of any kind. When I run my box as root and in X/KDE, I am not connected to the web. Usually in those modes I am exploring and learning. Additionally, no cracker can access a box unless specific ports are open to the world. Most desktop users do not run the many services that require opening those ports. Most desktop users want to connect to the web, but nothing more. That is all I do with my box. I am not running any servers of any kind and my iptables firewall prevents all external access to my box. Additionally, anybody who decides to start using such services, including me, is going to devote some time learning how to secure their box. Thus, for most users the priesthood is barking up the wrong tree. The world is filled with priests, two-bit tinhorns, and jack-booted thugs who think they possess standing to demand how other people should live. Ignore them. So here is the deal. Don’t initially worry about running your box as root. That’s right—run the box as root. Yes, that one sentence means the priesthood is running around with an exasperated wild look in their eyes, waving their arms, and pulling their hair. Chicken Littles. Ignore them. Your goal is to explore and learn—to get your box running. The easiest way to do that is run as root. That includes while working in X. In your early exploratory and learning phase, you will be required to work as root even if you logged in as a normal user. That will only mean that dozens of times every session you will type a password to obtain root access. Every time. That requirement gets old real fast, especially in the beginning when you are trying to learn the basics of the system. Avoid this frustration and run the box as root. If you destroy the box and have to reinstall, then so what? Life is little more than learning from our experiences. If you are concerned about people hijacking your box, then simply do not connect to the web until you become comfortable with the GNU/Linux environment and have created user accounts. In this day and age of microwave-oven-I-want-it-now mentality, that might be a challenge for some people. But for the patient person, connecting to the web can wait for a while. Once you are ready to connect to the web, then create that user account. Also disable all services that you do not need. Now, mind you, after you have a box configured, running as a normal user is a good idea and does indeed help reduce the potential for mucking up your box. No arguments. Likewise, if running any kind of server service, then additional caution is necessary. However, I am not writing to whiz kids and administrators. I’m writing to typical desktop users and mom-and-pops. In the beginning, when learning curves are steep, just run as root. Don’t let the priesthood get to you. Most people live long and healthy lives without once getting into a serious automobile accident. Likewise with computers. And buy some ear plugs if necessary. Finis. |
||