Root

Question 1

What is the root user?

AKA the root account

AKA super user

Answer 1

The user name or account that by default has access to all commands and files on a Linux or other Unix-like operating system.

the super user—it can read, write, and delete any file.

Note: The term root for the all-powerful administrative user may have arisen from the fact that root is the only account having write permissions (i.e., permission to modify files) in the root directory.

Question 2

what is /root (pronounced slash root)?

Answer 2

The root user’s home directory.

/root is a subdirectory of the root directory, as indicated by the forward slash that begins its name, and should not to be confused with that directory.

Home directories for users other than root are by default created in the /home directory, which is another standard subdirectory of the root directory.

Question 3

what are Root privileges?

Answer 3

The powers that the root account/root user/super user has on the system.

The root account is the most privileged on the system and has absolute power over it (i.e., complete access to all files and commands).

Among root’s powers are the ability to modify the system in any way desired and to grant and revoke access permissions (i.e., the ability to read, modify and execute specific files and directories) for other users, including any of those that are by default reserved for root.

Question 4

what is a rootkit?

Answer 4

a set of software tools secretly installed by an intruder into a computer that allows such intruder to use that computer for its own, usually nefarious, purposes when desired.

Well designed rootkits are able to obtain root access (i.e., access to the root account rather than just to a user account) and to hide most or all traces of their presence and activities.

Question 5

what command lets you switch to the root user account at any time?

Answer 5

su -

Question 6

what command lets you perform actions that require root privileges?

Answer 6

sudo [command]

Question 7

what are the reasons for using sudo instead of just logging in as root?

Answer 7

• The server administrator wants you to have root access for some commands and/or directories, but not for everything. In this case the administrator will set up sudo to have restrictions or whitelisted commands.
• Running commands while logged in as root can be dangerous. Using a non-root user makes it obvious when you are running a command that requires root privileges because you have to prefix your command with sudo.
• The sudo command provides a detailed audit trail so that system administrators can track what commands individuals used on system files.
• Sudo uses a ticketing system where you put in your password once, then you don’t have to until you haven’t run any sudo commands for five minutes or longer. This adds security to your command line session, preventing others from gaining root access if you leave your Terminal open on accident.