novice question regarding SU and TTY

Hi,

I've recently installed a gentoo box with the hardend
profile + hardened-sources so I'm new to all this.

I have two basic questions that I can't seem to
answer.

1) SU:
on the non-hardened gentoo box I'm used to, I can
enter as root and then do a "su username" and a
whoami
shows that username. However, in the hardened box,
issuing "su username" doesn't do anything and
whoami
is still root. I can't see any log messages related to
this. Is this behavior normal?

2) TTY:
on my non-hardened gentoo I emerged sys-power/nut
which is a UPS monitoring tool and needs to access
/dev/ttySx. The nut driver is supposed to run under
the nut user/group which is also part of the tty
group. In other words, the application has correct
access to the device. However, in my hardened box
after emerging without errors and verifying that the
nut user was added to the tty group, the nut app fails
when trying to access /dev/ttyS0 and reports
"permission denied".

I'm sure all this is due to my lack of experience but
could someone please give me the big picture.

Thank you.

Vieri



 
____________________________________________________________
________________________
Sucker-punch spam with award-winning protection. 
Try the free Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/feat
ures_spam.html
-- 
gentoo-hardenedgentoo.org mailing list

--- Vieri <rentorbuyyahoo.com> wrote:

> Hi,
> 
> I've recently installed a gentoo box with the
> hardend
> profile + hardened-sources so I'm new to all this.
> 
> I have two basic questions that I can't seem to
> answer.
> 
> 1) SU:
> on the non-hardened gentoo box I'm used to, I can
> enter as root and then do a "su username" and
a
> whoami
> shows that username. However, in the hardened box,
> issuing "su username" doesn't do anything and
whoami
> is still root. I can't see any log messages related
> to
> this. Is this behavior normal?
> 
> 2) TTY:
> on my non-hardened gentoo I emerged sys-power/nut
> which is a UPS monitoring tool and needs to access
> /dev/ttySx. The nut driver is supposed to run under
> the nut user/group which is also part of the tty
> group. In other words, the application has correct
> access to the device. However, in my hardened box
> after emerging without errors and verifying that the
> nut user was added to the tty group, the nut app
> fails
> when trying to access /dev/ttyS0 and reports
> "permission denied".
> 
> I'm sure all this is due to my lack of experience
> but
> could someone please give me the big picture.
> 

May I add:

non-hardened # ls -la /dev/ttyS0
lrwxrwxrwx 1 root root 5 Apr 27 12:39 /dev/ttyS0 ->
tts/0

hardened # ls -la /dev/ttyS0
crw-rw---- 1 root uucp 4, 64 May  8 00:19 /dev/ttyS0

Do I just need to manually change permissions for this
device?

> Thank you.
> 
> Vieri


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection
around 
http://mail.yahoo.com 
-- 
gentoo-hardenedgentoo.org mailing list