dwww Home | Show directory contents | Find package

<FILENAME filename="index.html"><html><head><title>KDE su käsiraamat</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="description" content="KDE su on UNIX käsu su graafiline kasutajaliides."><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="next" href="introduction.html" title="Peatükk 1. Sissejuhatus"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> <span class="application">KDE su</span> käsiraamat</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"></td><td class="upCell"> </td><td class="nextCell"><a accesskey="n" href="introduction.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div lang="et" class="book"><div class="titlepage"><div><div><h1 class="title"><a name="kdesu"></a><span class="application">KDE su</span> käsiraamat</h1></div><div><div class="authorgroup"><p class="author"><span class="firstname">Geert</span> <span class="surname">Jansen</span> <code class="email">&lt;g.t.jansen@stud.tue.nl&gt;</code></p><span class="othercredit"><span class="contrib">Tõlge eesti keelde</span>: <span class="firstname">Marek</span> <span class="surname">Laane</span><br></span></div></div><div>Versioon <span class="releaseinfo"><span class="orgname">KDE<br></span> 4.5 (<span class="date">2010-09-21</span>)</span></div><div><p class="copyright">Autoriõigus © 2000 <span class="firstname">Geert</span> <span class="surname">Jansen</span></p></div><div><p><a href="help:/kdoctools5-common/fdl-notice.html">Autoriõiguse märge</a></p></div><div><div><div class="abstract"><p><span class="application">KDE su</span> on <span class="trademark">UNIX</span>® käsu <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> graafiline kasutajaliides.</p></div></div></div></div><hr></div><div class="toc"><p><b>Sisukord</b></p><dl class="toc"><dt><span class="chapter"><a href="introduction.html">1. Sissejuhatus</a></span></dt><dt><span class="chapter"><a href="using-kdesu.html">2. <span class="application">KDE su</span> kasutamine</a></span></dt><dt><span class="chapter"><a href="Internals.html">3. Siseelu</a></span></dt><dd><dl><dt><span class="sect1"><a href="Internals.html#x-authentication">X'i autentimine</a></span></dt><dt><span class="sect1"><a href="interface-to-su.html"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> liides</a></span></dt><dt><span class="sect1"><a href="password-checking.html">Parooli kontroll</a></span></dt><dt><span class="sect1"><a href="sec-password-keeping.html">Parooli meeldejätmine</a></span></dt></dl></dd><dt><span class="chapter"><a href="Author.html">4. Autor</a></span></dt></dl></div><FILENAME filename="introduction.html"><html><head><title>Peatükk 1. Sissejuhatus</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="index.html" title="KDE su käsiraamat"><link rel="prev" href="index.html" title="KDE su käsiraamat"><link rel="next" href="using-kdesu.html" title="Peatükk 2. KDE su kasutamine"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> Sissejuhatus</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="index.html">Eelmine</a></td><td class="upCell"> </td><td class="nextCell"><a accesskey="n" href="using-kdesu.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>Peatükk 1. Sissejuhatus</h1></div></div></div><p>Tere tulemast kasutama <span class="application">KDE su</span>'d! <span class="application">KDE su</span> on <span class="trademark">UNIX</span>® käsu <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> graafiline kasutajaliides KDE töölaua keskkonnas.See võimaldab käivitada rakendusi teise kasutajana, andes vastava kasutaja parooli. <span class="application">KDE su</span> on privileegideta rakendus, see kasutab süsteemi käsku <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span>.</p><p><span class="application">KDE su</span>'l on aga üks lisavõimalus: ta võib parooli sinu eest meeles pidada. Seda võimalust kasutades tuleb parool sisestada ainult üks kord. Sellest räägib lähemalt <a class="xref" href="sec-password-keeping.html" title="Parooli meeldejätmine">“Parooli meeldejätmine”</a>, kus on ka hinnatud selle turvalisust.</p><p>Rakendust saab käivitada käsurealt või <code class="filename">.desktop</code>-faile avades. Kuigi see pärib administraatori (<code class="systemitem">root</code>) parooli <acronym class="acronym">GUI</acronym> dialoogis, pean ma ise seda rohkem käsurea &lt;-&gt; <acronym class="acronym">GUI</acronym> seguks kui puhtaks <acronym class="acronym">GUI</acronym> rakenduseks.</p><p>Et <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span> ei ole enam paigaldatud asukohta <strong class="userinput"><code> $(kde4-config --prefix)</code></strong>/bin, vaid hoopis <strong class="userinput"><code>kde4-config --path libexec</code></strong> ning ei asu seetõttu sinu otsinguteel (<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="envar"><code class="envar">Path</code></span>), tuleb <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span> käivitamiseks anda käsk <strong class="userinput"><code>$(kde4-config --path libexec)<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span></code></strong>.</p></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="index.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="using-kdesu.html">Järgmine</a></td></tr><tr><td class="prevCell"><span class="application">KDE su</span> käsiraamat </td><td class="upCell"> </td><td class="nextCell"> <span class="application">KDE su</span> kasutamine</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME><FILENAME filename="using-kdesu.html"><html><head><title>Peatükk 2. KDE su kasutamine</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="index.html" title="KDE su käsiraamat"><link rel="prev" href="introduction.html" title="Peatükk 1. Sissejuhatus"><link rel="next" href="Internals.html" title="Peatükk 3. Siseelu"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> <span class="application">KDE su</span> kasutamine</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="introduction.html">Eelmine</a></td><td class="upCell"> </td><td class="nextCell"><a accesskey="n" href="Internals.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="using-kdesu"></a>Peatükk 2. <span class="application">KDE su</span> kasutamine</h1></div></div></div><p>kdesu; kasutamine on väga lihtne. Süntaks näeb välja selline:</p><div class="cmdsynopsis"><p><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span> [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-c</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> käsk</code></em></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-d</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-f</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> fail</code></em></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-i</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> ikooni nimi</code></em></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-n</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-p</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> prioriteet</code></em></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-r</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-s</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-t</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-u</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> user</code></em></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">--noignorebutton</code></span>] [<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">--attach</code></span><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> akna ID</code></em></span>]</p></div><div class="cmdsynopsis"><p><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span> [<span class="orgname">KDE</span> üldised võtmed] [<span class="trademark">Qt</span>™ üldised võtmed]</p></div><p>Käsurea võtmeid selgitatakse allpool.</p><div class="variablelist"><dl class="variablelist"><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-c <span class="replaceable"><em class="replaceable"><code>käsk</code></em></span></code></span></span></dt><dd><p>Määrab käsu käivitama administraatori õigustes. See tuleb anda ühe argumendina. Kui näiteks soovid käivitada uut failihaldurit, tuleb käsureale kirjutada <strong class="userinput"><code>$(kde4-config --path libexec)<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu <span class="option"><code class="option">-c <span class="replaceable"><em class="replaceable"><code> <span class="application">Dolphin</span></code></em></span></code></span></strong></span></span></code></strong></p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-d</code></span></span></dt><dd><p>Näitab silumisinfot.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-f <span class="replaceable"><em class="replaceable"><code>fail</code></em></span></code></span></span></dt><dd><p>Võimaldab kasutada <span class="application">KDE su</span>'d tõhusalt <code class="filename">.desktop</code>-failide puhul, käskides <span class="application">KDE su</span>'l uurida faili, mille nimi on antud parameetriga <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="parameter"><em class="parameter"><code>fail</code></em></span>. Kui käsuandjal on sellel failil kirjutamisõigus, käivitab <span class="application">KDE su</span> faili kasutaja õigustes. Kui aga mitte, käivitatakse käsk kasutajana <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="parameter"><em class="parameter"><code>kasutaja</code></em></span> (vaikimisi administraator).</p><p>Parameetrit <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="parameter"><em class="parameter"><code>fail</code></em></span> hinnatakse järgmiselt: kui <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="parameter"><em class="parameter"><code>fail</code></em></span> algab märgiga <code class="literal">/</code>, on see absoluutne failinimi. Muul juhul peetakse seda <span class="orgname">KDE</span> globaalse seadistustefaili nimeks.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-i</code></span> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code>ikooni nimi</code></em></span></span></dt><dd><p>Määrab paroolidialoogis kasutatava ikooni nime. Määrata võib ka ainult nime, ilma faililaiendita.</p><p>Näiteks <span class="application">Konqueror</span>i käivitamiseks failihalduri režiimis ja <span class="application">Konqueror</span>i ikooni näitamiseks paroolidialoogis:</p><pre class="screen"><strong class="userinput"><code>$(kde4-config --path libexec)<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>kdesu</strong></span></span>  <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-i konqueror</code></span> 
<span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-c "konqueror --profile filemanagement"</code></span></code></strong></pre></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-n</code></span></span></dt><dd><p>Parooli ei jäeta meelde. See keelab paroolidialoogis märkekasti <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="guiitem"><span class="guilabel">Parool jäetakse meelde</span></span>.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-p</code></span> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code>prioriteet</code></em></span></span></dt><dd><p>Määrab prioriteedi. Prioriteet on suvaline arv vahemikus 0 kuni 100, kusjuures 100 tähendab kõrgeimat ja 0 madalaimat prioriteeti. Vaikeväärtus on 50.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-r</code></span></span></dt><dd><p>Kasutatakse reaalaja planeerijat.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-s</code></span></span></dt><dd><p>Peatab kdesu deemoni. Lähemalt räägib sellest <a class="xref" href="sec-password-keeping.html" title="Parooli meeldejätmine">“Parooli meeldejätmine”</a>.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-t</code></span></span></dt><dd><p>Võimaldab terminaliväljundi ning tühistab parooli säilitamise võimaluse. See on peamiselt mõeldud silumiseks, kui soovid käivitada konsoolirežiimis rakendust, kasuta parem tavapärast <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> käsku.</p></dd><dt><span class="term"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-u</code></span> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="replaceable"><em class="replaceable"><code> kasutaja</code></em></span></span></dt><dd><p>Kuigi <span class="application">KDE su</span> kõige levinum tarvitamine on käsu käivitamine administraatori õigustes, võib määrata suvalise kasutajanime ja vastava parooli.</p></dd></dl></div></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="introduction.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="Internals.html">Järgmine</a></td></tr><tr><td class="prevCell">Sissejuhatus </td><td class="upCell"> </td><td class="nextCell"> Siseelu</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME><FILENAME filename="Internals.html"><html><head><title>Peatükk 3. Siseelu</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="index.html" title="KDE su käsiraamat"><link rel="prev" href="using-kdesu.html" title="Peatükk 2. KDE su kasutamine"><link rel="next" href="interface-to-su.html" title="su liides"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> Siseelu</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="using-kdesu.html">Eelmine</a></td><td class="upCell"> </td><td class="nextCell"><a accesskey="n" href="interface-to-su.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="Internals"></a>Peatükk 3. Siseelu</h1></div></div></div><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="x-authentication"></a>X'i autentimine</h2></div></div></div><p>Käivitatav rakendus töötab administraatori ID-ga ning üldiselt ei ole sel ligipääsuõigust X'ile. <span class="application">KDE su</span> saab sellest aga üle, lisades autentimisküpsise ajutisele <code class="filename">.Xauthority</code>-failile. Käsu lõppemisega fail kustutatakse. </p><p>Kui sa X'i küpsiseid ei kasuta, ei ole midagi teha. <span class="application">KDE su</span> avastab selle ega lisa küpsist, aga siis pead ise tagama, et administraatoril oleks ligipääs X'i seansile.</p></div><FILENAME filename="interface-to-su.html"><html><head><title>su liides</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="Internals.html" title="Peatükk 3. Siseelu"><link rel="prev" href="Internals.html" title="Peatükk 3. Siseelu"><link rel="next" href="password-checking.html" title="Parooli kontroll"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> liides</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="Internals.html">Eelmine</a></td><td class="upCell">Siseelu</td><td class="nextCell"><a accesskey="n" href="password-checking.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="interface-to-su"></a><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> liides</h2></div></div></div><p><span class="application">KDE su</span> kasutab privileegide hankimiseks süsteemi <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> käsku. Siin seletan lähemalt, kuidas <span class="application">KDE su</span> seda teeb. </p><p>Kuna mõned <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> versioonid (<abbr class="abbrev">st.</abbr> seesamune <span class="trademark">Red Hat</span>® oma) ei taha parooli lugeda <code class="literal">stdin</code>-ist, loob <span class="application">KDE su</span> pty/tty paari ning käivitab <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> standardsete tty-ga seotud failikirjendajatega.</p><p>Kasutaja antud käsu käivitamiseks kasutab <span class="application">KDE su</span> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> juures võtit <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-c</code></span>. Seda argumenti tunnistavad kõik shellid, mida ma vähegi tean, nii et see peaks kõikjal toimima. <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> edastab argumendi <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="option"><code class="option">-c</code></span> sihtshellile ning see käivitab rakenduse. Näide: <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su <span class="option"><code class="option">root -c<span class="replaceable"><em class="replaceable"><code>rakendus</code></em></span></code></span></strong></span></span>.</p><p>Selle asemel, et käivitada kasutaja antud käsk vahetult <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span>-ga, käivitab <span class="application">KDE su</span> väikese tüverakenduse nimetusega <span class="application">kdesu_stub</span>. See tüvi (töötab sihtkasutajana) nõuab <span class="application">KDE su</span>lt mõningat infot pty/tty kanali kaudu (tüve stdin ja stdout) ning käivitab siis kasutaja rakenduse. Saadetavaks infoks on: X'i seanss, X'i autentimisküpsis (kui on olemas), muutuja <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="envar"><code class="envar">PATH</code></span> ja käivitatav käsk. Tüve kasutamise põhjuseks on see, et X'i küpsis kujutab endast varjatud infot, mida ei saa edastada käsureal.</p></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="Internals.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="password-checking.html">Järgmine</a></td></tr><tr><td class="prevCell">Siseelu </td><td class="upCell">Siseelu</td><td class="nextCell"> Parooli kontroll</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME><FILENAME filename="password-checking.html"><html><head><title>Parooli kontroll</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="Internals.html" title="Peatükk 3. Siseelu"><link rel="prev" href="interface-to-su.html" title="su liides"><link rel="next" href="sec-password-keeping.html" title="Parooli meeldejätmine"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> Parooli kontroll</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="interface-to-su.html">Eelmine</a></td><td class="upCell">Siseelu</td><td class="nextCell"><a accesskey="n" href="sec-password-keeping.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="password-checking"></a>Parooli kontroll</h2></div></div></div><p><span class="application">KDE su</span> kontrollib sisestatud parooli ning annab veateate, kui see pole korrektne. Kontrollimiseks käivitatakse testprogramm: <code class="filename">/bin/true</code>. Kui see õnnestub, peetakse parooli õigeks.</p></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="interface-to-su.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="sec-password-keeping.html">Järgmine</a></td></tr><tr><td class="prevCell"><span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> liides </td><td class="upCell">Siseelu</td><td class="nextCell"> Parooli meeldejätmine</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME><FILENAME filename="sec-password-keeping.html"><html><head><title>Parooli meeldejätmine</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="Internals.html" title="Peatükk 3. Siseelu"><link rel="prev" href="password-checking.html" title="Parooli kontroll"><link rel="next" href="Author.html" title="Peatükk 4. Autor"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> Parooli meeldejätmine</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="password-checking.html">Eelmine</a></td><td class="upCell">Siseelu</td><td class="nextCell"><a accesskey="n" href="Author.html">Järgmine</a></td></tr></table></div><div id="contentBody"><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sec-password-keeping"></a>Parooli meeldejätmine</h2></div></div></div><p>Puhtalt kasutaja mugavuse huvides kasutab <span class="application">KDE su</span> võimalust <span class="quote">“<span class="quote">parool jäetakse meelde</span>”</span>. Kui sulle on aga oluline turvalisus, peaksid selle osa hoolikalt läbi lugema.</p><p>Luba <span class="application">KDE su</span>'l parooli säilitada avab (kuigi väikese) turvaaugu sinu süsteemis. On selge, et <span class="application">KDE su</span> lubab paroole kasutada ainult sinu kasutaja-ID-ga, kuid kui siin ettevaatlikkust ei ilmutata, võrdsustab see administraatori (<code class="systemitem">root</code>) turvataseme tavakasutaja omaga. Sinu kontole sisse murdev häkker saab sel moel muidu <code class="systemitem">administraator</code>ile lubatud õigused. <span class="application">KDE su</span> püüab seda vältida. Kasutatav turvaskeem on vähemalt minu hinnangul mõistuse piires turvaline.</p><p><span class="application">KDE su</span> kasutab deemonit nimetusega <span class="application">kdesud</span>. See deemon uurib <span class="trademark">UNIX</span>® soklit <code class="filename">/tmp</code>-s käskude saamiseks. Sokli režiim on 0600, nii et sellega saab ühendust ainult kasutaja ID-ga. Kui parooli meeldejätmine on lubatud, käivitab <span class="application">KDE su</span> käsud deemoni kaudu. See kirjutab käsu ja <code class="systemitem">administraator</code>i parooli soklile ning deemon käivitab käsu <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> abil, nagu eespool kirjeldatud. Seejärel ei kustutata kohe käsku ja parooli, vaid need hoitakse teatud aeg alles. See ongi seadistusmoodulis määratav aegumisväärtus. Kui selle jooksul saabub sama käsk uuesti, ei ole kliendil vaja parooli uuesti sisestada. Häkkerite eemalhoidmiseks, kes võivad sinu kontole sisse murda ja deemonilt paroole varastada (näiteks seda silujaga ühendades), on deemon loonud set-group-id nogroup'i. See peaks takistama kõigil tavakasutajatel (ka sinul endal) hankimast paroole <span class="application">kdesud</span> protsessilt. Deemon määrab ka keskkonnamuutuja <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="envar"><code class="envar">DISPLAY</code></span> väärtuseks käivitusaegse väärtuse. Sellisel juhul on ainus asi, mida häkker saab teha, rakenduse käivitamine sinu seansis.</p><p>Selle skeemi nõrgaks kohaks on asjalu, et rakendused, mida sa käivitad, et ole tõenäoliselt loodud turvalisust silmas pidades (nagu setuid <code class="systemitem">root</code> rakendused). See tähendab, et neil võib esineda puhvri ületäide või muid probleeme, mida häkkerid saavad ära kasutada.</p><p>Parooli meeldejätmise võimalus on kompromiss turvalisuse ja mugavuse vahel. Soovitan väga tungivalt sellele mõelda ja ise otsustada, kas seda kasutada või mitte.</p></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="password-checking.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="Author.html">Järgmine</a></td></tr><tr><td class="prevCell">Parooli kontroll </td><td class="upCell">Siseelu</td><td class="nextCell"> Autor</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="using-kdesu.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"><a accesskey="n" href="interface-to-su.html">Järgmine</a></td></tr><tr><td class="prevCell"><span class="application">KDE su</span> kasutamine </td><td class="upCell"> </td><td class="nextCell"> <span xmlns:doc="http://nwalsh.com/xsl/documentation/1.0" class="command"><span class="command"><strong>su</strong></span></span> liides</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME><FILENAME filename="Author.html"><html><head><title>Peatükk 4. Autor</title><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-default.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-docs.css"><link rel="stylesheet" type="text/css" href="help:/kdoctools5-common/kde-localised.css"><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><meta name="keywords" content="KDE, su, parool, administraator"><link rel="home" href="index.html" title="KDE su käsiraamat"><link rel="up" href="index.html" title="KDE su käsiraamat"><link rel="prev" href="sec-password-keeping.html" title="Parooli meeldejätmine"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="GENERATOR" content="KDE XSL Stylesheet V1.14 using libxslt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div id="content"><div id="header"><div id="header_content"><div id="header_left"><div id="header_right"><img src="help:/kdoctools5-common/top-kde.jpg" width="36" height="34"> Autor</div></div></div></div><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="sec-password-keeping.html">Eelmine</a></td><td class="upCell"> </td><td class="nextCell"></td></tr></table></div><div id="contentBody"><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="Author"></a>Peatükk 4. Autor</h1></div></div></div><p><span class="application">KDE su</span></p><p>Autoriõigus 2000: <span class="firstname">Geert</span> <span class="surname">Jansen</span></p><p><span class="application">KDE su</span> kirjutas <span class="firstname">Geert</span> <span class="surname">Jansen</span>. Selle aluseks on mõneti Pietro Iglio <span class="application">KDE su</span> versioon 0.3, Me leppisime Pietroga kokku, et edaspidi olen selle hooldaja mina.</p><p>Autoriga saab ühendust võtta meilitsi: <code class="email">(g.t.jansen AT stud.tue.nl)</code>. Palun anna mulle teada kõigist leitud vigadest, et saaksin need ära parandada. Aga kirjuta ka siis, kui sul on hea mõte, kuidas midagi võiks paremaks muuta.</p><p>Tõlge eesti keelde: Marek Laane <code class="email">(bald AT smail.ee)</code></p><p><a name="gnu-fdl"></a>Käesolev dokumentatsioon on litsenseeritud vastavalt <a class="ulink" href="help:/kdoctools5-common/fdl-license.html" target="_top">GNU Vaba Dokumentatsiooni
Litsentsi</a> tingimustele.</p><p>Käesolev programm on litsenseeritud vastavalt <a class="ulink" href="help:/kdoctools5-common/artistic-license.html" target="_top">Artistic litsentsi</a>
tingimustele.</p></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"><a accesskey="p" href="sec-password-keeping.html">Eelmine</a></td><td class="upCell"><a accesskey="h" href="index.html">Esileht</a></td><td class="nextCell"></td></tr><tr><td class="prevCell">Parooli meeldejätmine </td><td class="upCell"> </td><td class="nextCell"> </td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME></div></div><div id="footer"><div class="navCenter"><table class="navigation"><tr><td class="prevCell"></td><td class="upCell"> </td><td class="nextCell"><a accesskey="n" href="introduction.html">Järgmine</a></td></tr><tr><td class="prevCell"> </td><td class="upCell"> </td><td class="nextCell"> Sissejuhatus</td></tr></table></div><div id="footer_text">Kas soovid midagi kommenteerida või seda lehekülge täiendada?<br>Saada oma tagasiside <a href="mailto:kde-doc-english@kde.org" class="footer_email">KDE dokumentatsiooni meeskonnale</a></div></div></div></body></html></FILENAME>

Generated by dwww version 1.15 on Sat May 18 13:50:49 CEST 2024.