From 7574a7287e2e121c9d5c91a5f4ea38c5b3ae2a04 Mon Sep 17 00:00:00 2001 From: Timothy Pearson Date: Sun, 6 Nov 2011 02:28:57 -0600 Subject: Additional kde to tde renaming --- doc/kdesu/index.docbook | 80 ++++++++++++++++++++++++------------------------- 1 file changed, 40 insertions(+), 40 deletions(-) (limited to 'doc/kdesu/index.docbook') diff --git a/doc/kdesu/index.docbook b/doc/kdesu/index.docbook index 800d20b10..81c71cf17 100644 --- a/doc/kdesu/index.docbook +++ b/doc/kdesu/index.docbook @@ -1,7 +1,7 @@ + @@ -10,7 +10,7 @@ -The &kdesu; handbook +The &tdesu; handbook &Geert.Jansen; &Geert.Jansen.mail; @@ -28,7 +28,7 @@ 1.00.00 -&kdesu; is a graphical front end for the &UNIX; +&tdesu; is a graphical front end for the &UNIX; su command. @@ -43,13 +43,13 @@ Introduction -Welcome to &kdesu;! &kdesu; is a graphical front end for the +Welcome to &tdesu;! &tdesu; is a graphical front end for the &UNIX; su command for the K Desktop Environment. It allows you to run a program as different user by supplying the -password for that user. &kdesu; is an unprivileged program; it uses +password for that user. &tdesu; is an unprivileged program; it uses the system's su. -&kdesu; has one additional feature: it can remember passwords +&tdesu; has one additional feature: it can remember passwords for you. If you are using this feature, you only need to enter the password once for each command. See for more information on this and a @@ -63,13 +63,13 @@ glue instead of a pure &GUI; program. - -Using &kdesu; + +Using &tdesu; -Usage of &kdesu; is easy. The syntax is like this: +Usage of &tdesu; is easy. The syntax is like this: -kdesu +tdesu @@ -89,7 +89,7 @@ user -kdesu +tdesu &kde; Generic Options Qt Generic Options @@ -101,7 +101,7 @@ user This specifies the program to run as root. It has to be passed in one argument. So if, for example, you want to start a new file manager, you -would enter at the prompt: kdesu @@ -110,10 +110,10 @@ would enter at the prompt: kdesu -This option allow efficient use of &kdesu; in -.desktop files. It tells &kdesu; to examine the +This option allow efficient use of &tdesu; in +.desktop files. It tells &tdesu; to examine the file specified by file. If this file is -writable by the current user, &kdesu; will execute the command as the +writable by the current user, &tdesu; will execute the command as the current user. If it is not writable, the command is executed as user user (defaults to root). file is evaluated like this: if @@ -121,7 +121,7 @@ current user. If it is not writable, the command is executed as user taken as an absolute filename. Otherwise, it is taken as the name of a global &kde; configuration file. For example: to configure the K display manager, kdm, you could issue -kdesu @@ -130,7 +130,7 @@ kdmrc just the name, without any extension. For instance to run kfmclient and show the &konqueror; icon in the password dialog: -kdesu kfmclient +tdesu kfmclient @@ -155,7 +155,7 @@ password checkbox in the password dialog. -Stop the kdesu daemon. See Stop the tdesu daemon. See . @@ -166,7 +166,7 @@ standard su instead. user -While the most common use for &kdesu; is to run a command as +While the most common use for &tdesu; is to run a command as the superuser, you can supply any user name and the appropriate password. @@ -183,12 +183,12 @@ password. X authentication The program you execute will run under the root user id and will -generally have no authority to access your X display. &kdesu; gets +generally have no authority to access your X display. &tdesu; gets around this by adding an authentication cookie for your display to a temporary .Xauthority file. After the command exits, this file is removed. -If you don't use X cookies, you are on your own. &kdesu; will +If you don't use X cookies, you are on your own. &tdesu; will detect this and will not add a cookie but you will have to make sure that root is allowed to access to your display. @@ -197,18 +197,18 @@ that root is allowed to access to your display. Interface to <command>su</command> -&kdesu; uses the sytem's su for acquiring -priviliges. In this section, I explain the details of how &kdesu; does +&tdesu; uses the sytem's su for acquiring +priviliges. In this section, I explain the details of how &tdesu; does this. Because some su implementations (&ie; the one from &RedHat;) don't want to read the password from -stdin, &kdesu; creates a pty/tty pair and executes +stdin, &tdesu; creates a pty/tty pair and executes su with it's standard filedescriptors connected to the tty. To execute the command the user selected, rather than an -interactive shell, &kdesu; uses the argument with +interactive shell, &tdesu; uses the argument with su. This argument is understood by every shell that I know of so it should work portably. su passes this argument to the target user's shell, and the @@ -216,9 +216,9 @@ shell executes the program. Example command: su . Instead of executing the user command directly with -su, &kdesu; executes a little stub program called -kdesu_stub. This stub (running as the -target user), requests some information from &kdesu; over the pty/tty +su, &tdesu; executes a little stub program called +tdesu_stub. This stub (running as the +target user), requests some information from &tdesu; over the pty/tty channel (the stub's stdin and stdout) and then executes the user's program. The information passed over is: the X display, an X authentication cookie (if available), the PATH and the @@ -231,7 +231,7 @@ command line. Password Checking -&kdesu; will check the password you entered and gives an error +&tdesu; will check the password you entered and gives an error message if it is not correct. The checking is done by executing a test program: /bin/true. If this succeeds, the password is assumed to be correct. @@ -241,25 +241,25 @@ password is assumed to be correct. Password Keeping -For your comfort, &kdesu; implements a keep +For your comfort, &tdesu; implements a keep password feature. If you are interested in security, you should read this paragraph. -Allowing &kdesu; to remember passwords opens up a (small) -security hole in your system. Obviously, &kdesu; does not allow +Allowing &tdesu; to remember passwords opens up a (small) +security hole in your system. Obviously, &tdesu; does not allow anybody but your user id to use the passwords, but, if done without caution, this would lowers root's security level to that of a normal user (you). A hacker who breaks into your account, would get -root access. &kdesu; tries +root access. &tdesu; tries to prevent this. The security scheme it uses is, in my opinion at least, reasonably safe and is explained here. -&kdesu; uses a daemon, called -kdesud. The daemon listens to a &UNIX; +&tdesu; uses a daemon, called +tdesud. The daemon listens to a &UNIX; socket in /tmp for commands. The mode of the socket is 0600 so that only your user id can connect to it. If -password keeping is enabled, &kdesu; executes commands through this +password keeping is enabled, &tdesu; executes commands through this daemon. It writes the command and root's password to the socket and the daemon executes the command using su, as describe @@ -271,7 +271,7 @@ not have to supply the password. To keep hackers who broke into your account from stealing passwords from the daemon (for example, by attaching a debugger), the daemon is installed set-group-id nogroup. This should prevent all normal users (including you) from -getting passwords from the kdesud +getting passwords from the tdesud process. Also, the daemon sets the DISPLAY environment variable to the value it had when it was started. The only thing a hacker can do is execute an application on your display. @@ -292,12 +292,12 @@ yourself if you want to use it or not. Author -&kdesu; +&tdesu; Copyright 2000 &Geert.Jansen; -&kdesu; is written by &Geert.Jansen;. It is somewhat based on -Pietro Iglio's &kdesu;, version 0.3. Pietro and I agreed that I will +&tdesu; is written by &Geert.Jansen;. It is somewhat based on +Pietro Iglio's &tdesu;, version 0.3. Pietro and I agreed that I will maintain this program in the future. The author can be reached through email at &Geert.Jansen.mail;. -- cgit v1.2.1